OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
CVS: cvs.openbsd.org: src

From: Stuart Henderson (sthencvs.openbsd.org)
Date: Tue Nov 17 2009 - 08:34:52 CST


CVSROOT: /cvs
Module name: src
Changes by: sthencvs.openbsd.org 2009/11/17 07:34:52

Modified files:
        lib/libssl/src/ssl: Tag: OPENBSD_4_6 s3_lib.c s3_pkt.c s3_srvr.c
                            ssl_locl.h

Log message:
Pull Ben Lauries blind prefix injection fix for CVE-2009-3555 from
openssl 0.9.8l.

As suggested by markus, for -stable the header change is being
restricted to a private file, so the minor version is not cranked here.

Discussed with markus, djm, deraadt.