Changelog for
openssl096-0.9.6-26.i386.rpm :
* Tue Mar 16 2004 Joe Orton
0.9.6-26- rebuild
* Mon Mar 08 2004 Joe Orton 0.9.6-25.9- rebuild
* Mon Mar 08 2004 Joe Orton 0.9.6-25.7- add security fixes for CAN-2004-0081 and CAN-2003-0851- conditionalize use of -Wa,--noexecstack
* Wed Oct 01 2003 Nalin Dahyabhai 0.9.6-24- add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged as not needing executable stacks
* Thu Sep 25 2003 Nalin Dahyabhai 0.9.6-23.9- rebuild
* Thu Sep 25 2003 Nalin Dahyabhai 0.9.6-23.8- rebuild
* Thu Sep 25 2003 Nalin Dahyabhai 0.9.6-23.7- backported backport from Joe Orton for changes in OpenSSL 0.9.6e and later, removing die-on-error code and replacing with error reporting- only parse a client cert if one was requested
* Wed Sep 24 2003 Nalin Dahyabhai - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)- ease back on the number of threads used in the threading test
* Tue Jul 15 2003 Nalin Dahyabhai 0.9.6-22- rebuild
* Tue Jul 15 2003 Nalin Dahyabhai 0.9.6-21.9- rebuild
* Tue Jul 15 2003 Nalin Dahyabhai 0.9.6-21.8- rebuild
* Tue Jul 15 2003 Nalin Dahyabhai 0.9.6-21.7- rebuild with updated threading test
* Sat Jun 14 2003 Nalin Dahyabhai 0.9.6-20- rebuild
* Sat Jun 14 2003 Nalin Dahyabhai 0.9.6-19- rebuild
* Sat Jun 14 2003 Nalin Dahyabhai 0.9.6-18.9- rebuild
* Sat Jun 14 2003 Nalin Dahyabhai 0.9.6-18.8- rebuild
* Thu Jun 12 2003 Nalin Dahyabhai 0.9.6-18.7- thread-safety fix for RSA blinding- backport fix for prng not being seeded causing problems from 0.9.7b- add a check at build-time to ensure that RSA is thread-safe
* Thu May 01 2003 Elliot Lee 0.9.6-18- Change ExcludeArch to ExclusiveArch to better handle the future of computing architectures
* Wed Mar 19 2003 Nalin Dahyabhai 0.9.6-17- add backported patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher\'s attack (CAN-2003-0131)
* Mon Mar 17 2003 Nalin Dahyabhai 0.9.6-16- add patch to enable RSA blinding by default, closing a timing attack (CAN-2003-0147)
* Wed Feb 19 2003 Nalin Dahyabhai 0.9.6-15- rebuild for Raw Hide
* Wed Feb 19 2003 Nalin Dahyabhai 0.9.6-14- add fix to guard against attempts to allocate negative amounts of memory- add patch for CAN-2003-0078, fixing a timing attack
* Fri Aug 02 2002 Nalin Dahyabhai 0.9.6-13- update asn patch to fix accidental reversal of a logic check
* Thu Aug 01 2002 Nalin Dahyabhai 0.9.6-12- update asn patch to reduce chance that compiler optimization will remove one of the added tests
* Thu Aug 01 2002 Nalin Dahyabhai 0.9.6-11- rebuild
* Tue Jul 30 2002 Nalin Dahyabhai 0.9.6-10- add patch to fix ASN.1 vulnerabilities
* Fri Jul 26 2002 Nalin Dahyabhai 0.9.6-9- add backport of Ben Laurie\'s patches for OpenSSL 0.9.6d
* Sat Jun 22 2002 Tim Powers - automated rebuild
* Fri May 24 2002 Tim Powers - automated rebuild
* Tue Aug 07 2001 Nalin Dahyabhai - conflict with openssl <= 0.9.6
* Thu Jul 12 2001 Nalin Dahyabhai - add patches to fix PRNG flaws, supplied by Bodo Moeller and the OpenSSL Group
* Wed Jun 20 2001 Florian La Roche - add ExcludeArch: s390 s390x- BuildPreReq: bc
* Sat Jun 02 2001 Nalin Dahyabhai - change two memcpy() calls to memmove()
* Wed May 02 2001 Nalin Dahyabhai - adjust the hobble script to not disturb symlinks in include/ (fix from Joe Orton)
* Fri Apr 27 2001 Nalin Dahyabhai - convert into a binary-compatibility package
* Sat Apr 21 2001 Nalin Dahyabhai - use __libc_enable_secure in OPENSSL_setugid (suggested by solarAATTopenwall.com)- make backported OPENSSL_setugid, BN_bntest_rand, and BN_rand_range static functions, which keeps them away from client applications more cleanly
* Wed Apr 18 2001 Nalin Dahyabhai - backport security fixes from 0.9.6a
* Tue Mar 13 2001 Nalin Dahyabhai - use BN_LLONG on s390
* Mon Mar 12 2001 Nalin Dahyabhai - fix the s390 changes for 0.9.6 (isn\'t supposed to be marked as 64-bit)
* Sat Mar 03 2001 Nalin Dahyabhai - move c_rehash to the perl subpackage, because it\'s a perl script now
* Fri Mar 02 2001 Nalin Dahyabhai - update to 0.9.6- enable MD2- use the libcrypto.so and libssl.so targets to build shared libs with- bump the soversion to 1 because we\'re no longer compatible with any of the various 0.9.5a packages circulating around, which provide lib
*.so.0
* Wed Feb 28 2001 Florian La Roche - change hobble-openssl for disabling MD2 again
* Tue Feb 27 2001 Nalin Dahyabhai - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152 bytes or so, causing EVP_DigestInit() to zero out stack variables in apps built against a version of the library without it
* Mon Feb 26 2001 Nalin Dahyabhai - disable some inline assembly, which on x86 is Pentium-specific- re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)
* Thu Feb 08 2001 Florian La Roche - fix s390 patch
* Fri Dec 08 2000 Than Ngo - added support s390
* Mon Nov 20 2000 Nalin Dahyabhai - remove -Wa,
* and -m
* compiler flags from the default Configure file (#20656)- add the CA.pl man page to the perl subpackage
* Thu Nov 02 2000 Nalin Dahyabhai - always build with -mcpu=ev5 on alpha
* Tue Oct 31 2000 Nalin Dahyabhai - add a symlink from cert.pem to ca-bundle.crt
* Thu Oct 26 2000 Nalin Dahyabhai - add a ca-bundle file for packages like Samba to reference for CA certificates
* Wed Oct 25 2000 Nalin Dahyabhai - remove libcrypto\'s crypt(), which doesn\'t handle md5crypt (#19295)
* Tue Oct 03 2000 Nalin Dahyabhai - add unzip as a buildprereq (#17662)- update m2crypto to 0.05-snap4
* Wed Sep 27 2000 Bill Nottingham - fix some issues in building when it\'s not installed
* Thu Sep 07 2000 Nalin Dahyabhai - make sure the headers we include are the ones we built with (aaaaarrgh!)
* Sat Sep 02 2000 Nalin Dahyabhai - add Richard Henderson\'s patch for BN on ia64- clean up the changelog
* Wed Aug 30 2000 Nalin Dahyabhai - fix the building of python modules without openssl-devel already installed
* Thu Aug 24 2000 Nalin Dahyabhai - byte-compile python extensions without the build-root- adjust the makefile to not remove temporary files (like .key files when building .csr files) by marking them as .PRECIOUS
* Sun Aug 20 2000 Nalin Dahyabhai - break out python extensions into a subpackage
* Tue Jul 18 2000 Nalin Dahyabhai - tweak the makefile some more
* Wed Jul 12 2000 Nalin Dahyabhai - disable MD2 support
* Fri Jul 07 2000 Nalin Dahyabhai - disable MDC2 support
* Mon Jul 03 2000 Nalin Dahyabhai - tweak the disabling of RC5, IDEA support- tweak the makefile
* Fri Jun 30 2000 Nalin Dahyabhai - strip binaries and libraries- rework certificate makefile to have the right parts for Apache
* Thu Jun 29 2000 Nalin Dahyabhai - use %{_perl} instead of /usr/bin/perl- disable alpha until it passes its own test suite
* Sat Jun 10 2000 Nalin Dahyabhai - move the passwd.1 man page out of the passwd package\'s way
* Sat Jun 03 2000 Nalin Dahyabhai - update to 0.9.5a, modified for U.S.- add perl as a build-time requirement- move certificate makefile to another package- disable RC5, IDEA, RSA support- remove optimizations for now
* Wed Mar 01 2000 Florian La Roche - Bero told me to move the Makefile into this package
* Wed Mar 01 2000 Florian La Roche - add lib
*.so symlinks to link dynamically against shared libs
* Tue Feb 29 2000 Florian La Roche - update to 0.9.5- run ldconfig directly in post/postun- add FAQ
* Sat Dec 18 1999 Bernhard Rosenkrdnzer - Fix build on non-x86 platforms
* Fri Nov 12 1999 Bernhard Rosenkrdnzer - move /usr/share/ssl/
* from -devel to main package
* Wed Oct 27 1999 Bernhard Rosenkrdnzer - inital packaging- changes from base: - Move /usr/local/ssl to /usr/share/ssl for FHS compliance - handle RPM_OPT_FLAGS
