CVS commit: pkgsrc/security/openssl

[Tonnerre Lombard <tonnerre%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tonnerre
Date:           Tue Jun  3 21:39:40 UTC 2008

Modified Files:
        pkgsrc/security/openssl: Makefile distinfo
Added Files:
        pkgsrc/security/openssl/patches: patch-ab patch-ah

Log Message:
Fix two Denial of Service vulnerabilities in OpenSSL 0.9.8g:
 - Fix flaw if 'Server Key exchange message' is omitted from a TLS handshake
   which could lead to a silent crash.
 - Fix double free in TLS server name extensions which could lead to a remote
   crash.

Patches from upstream.


To generate a diff of this commit:
cvs rdiff -r1.131 -r1.132 pkgsrc/security/openssl/Makefile
cvs rdiff -r1.59 -r1.60 pkgsrc/security/openssl/distinfo
cvs rdiff -r0 -r1.12 pkgsrc/security/openssl/patches/patch-ab
cvs rdiff -r0 -r1.8 pkgsrc/security/openssl/patches/patch-ah

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.