Arne Fitzenreiter 8074eed711 openssl: security update to 0.9.8x (CVE-2012-2333). ...

Invalid TLS/DTLS record attack (CVE-2012-2333)
===============================================

A flaw in the OpenSSL handling of CBC mode ciphersuites in TLS 1.1, 1.2 and
DTLS can be exploited in a denial of service attack on both clients and
servers.

DTLS applications are affected in all versions of OpenSSL. TLS is only
affected in OpenSSL 1.0.1 and later.

Thanks to Codenomicon for discovering this issue using Fuzz-o-Matic fuzzing
as a service testing platform.

The fix was developed by Stephen Henson of the OpenSSL core team.

Affected users should upgrade to OpenSSL 1.0.1c, 1.0.0j or 0.9.8x

References
==========

URL for this Security Advisory:
http://www.openssl.org/news/secadv_20120510.txt

2012-05-12 19:33:31 +02:00

config

strongswan: update to 4.6.3.

2012-05-12 19:31:46 +02:00

doc

Remove tons of code from the buildscripts that was not used anymore.

2011-09-18 14:51:23 +02:00

html

samba: security update to 3.5.15. (CVE-2012-2111).

2012-05-02 10:10:07 +02:00

langs

Updated french translation - thx to Lalsacien

2011-10-29 12:04:25 +02:00

lfs

openssl: security update to 0.9.8x (CVE-2012-2333).

2012-05-12 19:33:31 +02:00

src

traceroute: update to 2.0.18 and fix name resolution.

2012-05-12 19:32:23 +02:00

tools

CFLAGS: Explicitely enforce softfp.

2011-12-11 13:15:27 +01:00

.gitignore

Buildsystem: generate image md5sums.

2011-01-01 11:40:19 +01:00

.mailmap

Add .mailmap.

2010-01-22 11:37:55 +01:00

make.sh

started core59.

2012-05-12 19:24:46 +02:00

Description

No description provided

101 MiB

Languages

Perl 70.4%

Shell 23%

C 4%

Python 0.6%

Makefile 0.5%

Other 1.4%