The annotated tag OpenSSL_1_0_2k has been created
at 76599d516c660f785b503b6e256ecda43c3f89b4 (tag)
tagging 081314d07705aa58912845c213a48414d8f616a9 (commit)
replaces OpenSSL_1_0_2j
tagged by Matt Caswell
on Thu Jan 26 13:22:36 2017 +0000
- Log -----------------------------------------------------------------
OpenSSL 1.0.2k release tag
-----BEGIN PGP SIGNATURE-----
iQEuBAABCAAYBQJYifgcERxtYXR0QG9wZW5zc2wub3JnAAoJENnE0m0OYESReOIH
/23ErvXiEDM375DOuM8k/+uAdhHxlkEUSLzOzbco25ck7z5B7TugOLw3SMNyrl39
4+6b4EHVC1PRnc6NhJ73XXbirIIFRBeeeZGdPs28Q2ZP68zOujrDVa7PX+CoQDav
x/qAKgPa9ngQW69GQb6mL1+vNyA4XVr7r6qsM2ZzVcOiStKozZ5nGjnFU99DFjvX
iT/heVZwJLaFZR54/oyT4EZBTUJv/JK52IkqH9BR/UxDpp/+UuSSCGn9j4jjpU88
DyaenkrDb4nOdncGLJ5cf2ex0tJi04sgOU6dWE+vwYY3hhv2nHJpAPZIpTf5Vr/L
dAQIjatRUuoMJXWmJiR2Apc=
=p+ix
-----END PGP SIGNATURE-----
Andy Polyakov (7):
Makefile.org: clear APPS environment variable.
bn/asm/x86_64-mont.pl: fix for CVE-2016-7055 (Low severity).
modes/ctr128.c: fix false carry in counter increment procedure.
INSTALL: clarify 386 and no-sse2 options.
perlasm/x86_64-xlate.pl: refine sign extension in ea package.
crypto/evp: harden RC4_MD5 cipher.
bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal.
Beat Bolli (1):
Use consistent variable names
Benjamin Kaduk (2):
Fix grammar-o in CONTRIBUTING
Fix a bug in clienthello processing
Bernd Edlinger (4):
Fix a memory leak in RSA_padding_add_PKCS1_OAEP_mgf1
Fix error handling in SSL_CTX_new
Fix a ssl session leak due to OOM in lh_SSL_SESSION_insert
Fix error handling in compute_key, BN_CTX_get can return NULL
Cristian Stoica (1):
remove redundant zero assignments
David Woodhouse (1):
Call ENGINE_init() before trying to use keys from engine
Dr. Matthias St. Pierre (1):
Fix leak of secrecy in ecdh_compute_key()
Dr. Stephen Henson (1):
Check input length to pkey_rsa_verify()
FdaSilvaYY (1):
Clean one unused variable, plus an useless one.
Finn Hakansson (1):
Fix typo.
Kurt Cancemi (1):
Add missing error string for SSL_R_TOO_MANY_WARN_ALERTS
Kurt Roeckx (1):
Make SSL_read and SSL_write return the old behaviour and document it.
Markus Triska (1):
replace "will lookup up" by "will look up"
Matt Caswell (16):
Prepare for 1.0.2k-dev
Fix NEWS error
Ensure we handle len == 0 in ERR_err_string_n
A zero return from BIO_read/BIO_write() could be retryable
Fix a double free in ca command line
Fix length check writing status request extension
Ensure we have length checks for all extensions
Implement length checks as a macro
Fix heartbeat_test
Fail if an unrecognised record type is received
Add a CHANGES entry for the unrecognised record type change
Update CHANGES and NEWS
Revert "Fix heartbeat_test"
Fix SSL_VERIFY_CLIENT_ONCE
Update CHANGES and NEWS for new release
Prepare for 1.0.2k release
Matthias Kraft (1):
Solution proposal for issue #1647.
Orgad Shaneh (5):
Configure: Improve incremental build time
mklink: Do not needlessly overwrite linked files...
domd: Do not needlessly overwrite Makefiles
mklink: Do not needlessly overwrite linked files...
domd: Preserve Makefile time when it is unchanged
Patrick Steuer (2):
Fix strict-warnings build
Fix strict-warnings build
Rich Salz (8):
Revert "Call ENGINE_init() before trying to use keys from engine"
RT is put out to pasture
Correctly find all critical CRL extensions
Fix typo (reported by Matthias St. Pierre)
Missed a mention of RT
Check return value of some BN functions.
GH1986: Document -header flag.
Add missing va_end
Richard Levitte (19):
apps/apps.c: initialize and de-initialize engine around key loading
Make 'openssl prime ""' not segfault
Fix no-des
If an engine comes up explicitely, it must also come down explicitely
apps: make setup_engine() and release_engine() available always
%p takes void*, so make sure to cast arguments to void*
Add $(EX_LIBS) to the LIBDEPS for libgost.so, just as for all other
engines
Secure our notification email.
Clarify what X509_NAME_online does with the given buffer and size
UI code style cleanup
Remove extra bang
VMS UI_OpenSSL: if the TT device isn't a tty, flag instead of error
UI_OpenSSL()'s session opener fails on MacOS X
Make 'err' lable in ssl_cert_dup unconditional
Fix ssl_cert_dup: change one 'return NULL' to 'goto err'
M_check_autoarg: sanity check the key
Reformat M_check_autoarg to match our coding style
Fix DSA parameter generation control error
Better check of DH parameters in TLS data
Steven Fackler (1):
Fix signatures of EVP_Digest{Sign,Verify}Update
Vitezslav Cizek (2):
Degrade 3DES to MEDIUM in SSL2
apps/speed.c: Fix crash when config loading fails
russor (1):
zero pad DHE public key in ServerKeyExchange message for interop
-----------------------------------------------------------------------
_____
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits
