git.ipfire.org Git - thirdparty/openssl.git/commit

]> git.ipfire.org Git - thirdparty/openssl.git/commit - CHANGES

projects / thirdparty / openssl.git / commit

author	Dr. Stephen Henson <steve@openssl.org>
	Thu, 19 Apr 2012 16:19:07 +0000 (16:19 +0000)
committer	Dr. Stephen Henson <steve@openssl.org>
	Thu, 19 Apr 2012 16:19:07 +0000 (16:19 +0000)
commit	564a503b1b80ad5919952809d2f988a81fbddcd2
tree	5a35c0628166a23b799a6e40d429c41faeb7365f	tree \| snapshot
parent	56eeb1b28ce326da133cedb33299e8329a9538b7	commit \| diff

Check for potentially exploitable overflows in asn1_d2i_read_bio
BUF_mem_grow and BUF_mem_grow_clean. Refuse attempts to shrink buffer
in CRYPTO_realloc_clean.

Thanks to Tavis Ormandy, Google Security Team, for discovering this
issue and to Adam Langley <agl@chromium.org> for fixing it. (CVE-2012-2110)

CHANGES		diff \| blob \| blame \| history
crypto/asn1/a_d2i_fp.c		diff \| blob \| blame \| history
crypto/buffer/buffer.c		diff \| blob \| blame \| history
crypto/mem.c		diff \| blob \| blame \| history

A mirror of the official openssl repository

RSS Atom