| commit | 3ff55e9680cc99f330f25e48cd1422e3459c02de | [log] [tgz] |
|---|---|---|
| author | Mark J. Cox <mark@openssl.org> | Thu Sep 28 13:18:43 2006 +0000 |
| committer | Mark J. Cox <mark@openssl.org> | Thu Sep 28 13:18:43 2006 +0000 |
| tree | 1d0ec06ac2e93bcd761869294c1e21b682dce4a6 | |
| parent | cbb92dfaf0ec4e4bc91e729c69847f56d40d8302 [diff] |
Fix buffer overflow in SSL_get_shared_ciphers() function. (CVE-2006-3738) [Tavis Ormandy and Will Drewry, Google Security Team] Fix SSL client code which could crash if connecting to a malicious SSLv2 server. (CVE-2006-4343) [Tavis Ormandy and Will Drewry, Google Security Team]