diff options
author | Xin LI <delphij@FreeBSD.org> | 2014-01-07 19:02:08 +0000 |
---|---|---|
committer | Xin LI <delphij@FreeBSD.org> | 2014-01-07 19:02:08 +0000 |
commit | cbbee3a581d0bbf1b738c0805da55a438c265a20 (patch) | |
tree | 2e2eb91a8a37902a3e02fcc8726521f89373fdd8 /crypto/rsa | |
parent | ed4c5254dd244e65403ee0ca57f1a5727ff1761d (diff) | |
download | src-cbbee3a581d0bbf1b738c0805da55a438c265a20.tar.gz src-cbbee3a581d0bbf1b738c0805da55a438c265a20.zip |
Import vendor fixes:
197e0ea Fix for TLS record tampering bug. (CVE-2013-4353).
3462896 For DTLS we might need to retransmit messages from the
previous session so keep a copy of write context in DTLS
retransmission buffers instead of replacing it after
sending CCS. (CVE-2013-6450).
ca98926 When deciding whether to use TLS 1.2 PRF and record hash
algorithms use the version number in the corresponding
SSL_METHOD structure instead of the SSL structure. The
SSL structure version is sometimes inaccurate.
Note: OpenSSL 1.0.2 and later effectively do this already.
(CVE-2013-6449).
Notes
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=260399
Diffstat (limited to 'crypto/rsa')
0 files changed, 0 insertions, 0 deletions