Viewing all changes in revision 27.
- Committer: Bazaar Package Importer
- Date: 2009-09-08 15:05:08 UTC
- Revision ID: james.westby@ubuntu.com-20090908150508-1901pxm69komw55k
* SECURITY UPDATE: certificate spoofing via hash collisions from MD2
design flaws.
- crypto/evp/c_alld.c, ssl/ssl_algs.c: disable MD2 digest.
- crypto/x509/x509_vfy.c: skip signature check for self signed
certificates
- http://marc.info/?l=openssl-cvs&m=124508133203041&w=2
- http://marc.info/?l=openssl-cvs&m=124704528713852&w=2
- CVE-2009-2409
design flaws.
- crypto/evp/c_alld.c, ssl/ssl_algs.c: disable MD2 digest.
- crypto/x509/x509_vfy.c: skip signature check for self signed
certificates
- http://marc.info/?l=openssl-cvs&m=124508133203041&w=2
- http://marc.info/?l=openssl-cvs&m=124704528713852&w=2
- CVE-2009-2409
- files modified:
- crypto/evp/c_alld.c
expand all
collapse all
added
removed
