openssl/crypto/dsa
Mark J. Cox 951dfbb13a Introduce limits to prevent malicious keys being able to
cause a denial of service.  (CVE-2006-2940)
[Steve Henson, Bodo Moeller]

Fix ASN.1 parsing of certain invalid structures that can result
in a denial of service.  (CVE-2006-2937)  [Steve Henson]

Fix buffer overflow in SSL_get_shared_ciphers() function.
(CVE-2006-3738) [Tavis Ormandy and Will Drewry, Google Security Team]

Fix SSL client code which could crash if connecting to a
malicious SSLv2 server.  (CVE-2006-4343)
[Tavis Ormandy and Will Drewry, Google Security Team]
2006-09-28 11:29:03 +00:00
..
.cvsignore Add emacs cache files to .cvsignore. 2005-04-11 14:17:07 +00:00
dsa.h Introduce limits to prevent malicious keys being able to 2006-09-28 11:29:03 +00:00
dsa_asn1.c Get rid of ASN1_ITEM_FUNCTIONS dummy function 2001-02-23 12:47:06 +00:00
dsa_depr.c When OPENSSL_NO_DEPRECATED is defined, deprecated functions are (or should 2003-10-29 04:06:50 +00:00
dsa_err.c Introduce limits to prevent malicious keys being able to 2006-09-28 11:29:03 +00:00
dsa_gen.c when building with OPENSSL_NO_DEPRECATED defined BN_zero is a macro 2005-03-28 15:06:29 +00:00
dsa_key.c Use BN_with_flags() in a cleaner way. 2005-05-27 15:39:24 +00:00
dsa_lib.c make 2005-07-16 11:13:10 +00:00
dsa_ossl.c Introduce limits to prevent malicious keys being able to 2006-09-28 11:29:03 +00:00
dsa_sign.c We seem to carry some rests of the 0.9.6 [engine] ENGINE framework in form 2003-04-08 06:00:05 +00:00
dsa_vrf.c We seem to carry some rests of the 0.9.6 [engine] ENGINE framework in form 2003-04-08 06:00:05 +00:00
dsagen.c Adjust the parameter lists in some not commonly used files. 2003-01-01 23:41:46 +00:00
dsatest.c make 2005-07-16 11:13:10 +00:00
fips186a.txt Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
Makefile Update filenames in makefiles 2006-02-04 01:49:36 +00:00
README Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00

The stuff in here is based on patches supplied to me by
Steven Schoch <schoch@sheba.arc.nasa.gov> to do DSS.
I have since modified a them a little but a debt of gratitude
is due for doing the initial work.