Changelog for
libopenssl-devel-0.9.8m-45.1.x86_64.rpm :
Mon Mar 24 13:00:00 2014 cabeloAATTopensuse.org
- Insert patch #10
Sat Feb 23 13:00:00 2013 scorotAATTfree.fr
- security update to upstream versions 0.9.8x (CVE-2013-0166)
Mon Apr 23 14:00:00 2012 lijewski.stefanAATTzabka.pl
- security update to upstream versions 0.9.8v (CVE-2012-2110)
Fri Mar 16 13:00:00 2012 lijewski.stefanAATTzabka.pl
- security update to upstream versions 0.9.8u
Thu Jan 19 13:00:00 2012 lijewski.stefanAATTzabka.pl
- security update to upstream versions 0.9.8t
- patch cleanup
Wed Jun 15 14:00:00 2011 lijewski.stefanAATTgmail.com
- fix bug[bnc#693027].
Add protection against ECDSA timing attacks as mentioned in the paper
by Billy Bob Brumley and Nicola Tuveri, see:
http://eprint.iacr.org/2011/232.pdf
[Billy Bob Brumley and Nicola Tuveri]
Thu Feb 10 13:00:00 2011 gjheAATTnovell.com
- fix bug [bnc#670526]
CVE-2011-0014,OCSP stapling vulnerability
Tue Dec 7 13:00:00 2010 gjheAATTnovell.com
- fix bug [bnc#657663]
CVE-2010-4180
for CVE-2010-4252,no patch is added(for the J-PAKE
implementaion is not compiled in by default).
Thu Nov 18 13:00:00 2010 gjheAATTnovell.com
- fix bug [bnc#651003]
CVE-2010-3864
Sat Sep 25 14:00:00 2010 gjheAATTnovell.com
- fix bug [bnc#629905]
CVE-2010-2939
Wed Mar 31 14:00:00 2010 meissnerAATTsuse.de
- Added patch to enable secure renegotiation
support for CVE-2009-3555 / bnc#584292
Fri Jan 15 13:00:00 2010 gjheAATTnovell.com
- fix security bug [bnc#566238]
CVE-2009-4355
Fri Nov 13 13:00:00 2009 gjheAATTnovell.com
- fix security bug [bnc#553641]
CVE-2009-3555
Tue Sep 1 14:00:00 2009 gjheAATTnovell.com
- fix Bug [bnc#526319]
Wed Aug 26 14:00:00 2009 cooloAATTnovell.com
- use %patch0 for Patch0
Fri Jul 3 14:00:00 2009 gjheAATTnovell.com
- update to version 0.9.8k
- patches merged upstream:
openssl-CVE-2008-5077.patch
openssl-CVE-2009-0590.patch
openssl-CVE-2009-0591.patch
openssl-CVE-2009-0789.patch
openssl-CVE-2009-1377.patch
openssl-CVE-2009-1378.patch
openssl-CVE-2009-1379.patch
openssl-CVE-2009-1386.patch
openssl-CVE-2009-1387.patch
Tue Jun 30 14:00:00 2009 gjheAATTnovell.com
- fix security bug [bnc#509031]
CVE-2009-1386
CVE-2009-1387
Tue Jun 30 14:00:00 2009 gjheAATTnovell.com
- fix security bug [bnc#504687]
CVE-2009-1377
CVE-2009-1378
CVE-2009-1379
Wed Apr 15 14:00:00 2009 gjheAATTsuse.de
- fix security bug [bnc#489641]
CVE-2009-0590
CVE-2009-0591
CVE-2009-0789