"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "NEWS" between
openssl-1.0.2t.tar.gz and openssl-1.0.2u.tar.gz

About: OpenSSL is a toolkit implementing the Transport Layer Security (TLS) and Secure Sockets Layer (SSL v2/v3) protocols as well as a full-strength general purpose cryptography library. Long Term Support (LTS) version (support will be provided until end of 2019).

NEWS  (openssl-1.0.2t):NEWS  (openssl-1.0.2u)
NEWS NEWS
==== ====
This file gives a brief overview of the major changes between each OpenSSL This file gives a brief overview of the major changes between each OpenSSL
release. For more details please read the CHANGES file. release. For more details please read the CHANGES file.
Major changes between OpenSSL 1.0.2t and OpenSSL 1.0.2u [20 Dec 2019]
o Fixed an an overflow bug in the x64_64 Montgomery squaring procedure
used in exponentiation with 512-bit moduli (CVE-2019-1551)
Major changes between OpenSSL 1.0.2s and OpenSSL 1.0.2t [10 Sep 2019] Major changes between OpenSSL 1.0.2s and OpenSSL 1.0.2t [10 Sep 2019]
o Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey o Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
(CVE-2019-1563) (CVE-2019-1563)
o For built-in EC curves, ensure an EC_GROUP built from the curve name is o For built-in EC curves, ensure an EC_GROUP built from the curve name is
used even when parsing explicit parameters used even when parsing explicit parameters
o Compute ECC cofactors if not provided during EC_GROUP construction o Compute ECC cofactors if not provided during EC_GROUP construction
(CVE-2019-1547) (CVE-2019-1547)
o Document issue with installation paths in diverse Windows builds o Document issue with installation paths in diverse Windows builds
(CVE-2019-1552) (CVE-2019-1552)
 End of changes. 1 change blocks. 
0 lines changed or deleted 5 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)