HomeFreeBSD

Import DTLS fix from upstream OpenSSL 0.9.8 branch:

Description

Import DTLS fix from upstream OpenSSL 0.9.8 branch:

Fix DTLS fragment bug - out-of-sequence message handling which could
result in NULL pointer dereference in
dtls1_process_out_of_seq_message().

Note that this will not get FreeBSD Security Advisory as DTLS is
experimental in OpenSSL.

Security: CVE-2009-1387
Obtained from: OpenSSL CVS

		http://cvs.openssl.org/chngview?cn=17958

Details

Provenance
simonAuthored on Aug 23 2009, 2:39 PM
Parents
rG58c74b7534a4: Import DTLS fix from upstream OpenSSL 0.9.8 branch:
Branches
Unknown
Tags
Unknown
References
tag: vendor/openssl/0.9.8k-dtls-fixes

Event Timeline