Simon L. B. Nielsen 0a70456882 Fix Incorrectly formatted ClientHello SSL/TLS handshake messages could
cause OpenSSL to parse past the end of the message.

Note: Applications are only affected if they act as a server and call
SSL_CTX_set_tlsext_status_cb on the server's SSL_CTX. This includes
Apache httpd >= 2.3.3, if configured with "SSLUseStapling On".

Security:	http://www.openssl.org/news/secadv_20110208.txt
Security:	CVE-2011-0014
Obtained from:	OpenSSL CVS
2011-02-12 21:30:46 +00:00
..
2008-08-23 10:51:00 +00:00
2010-11-22 18:23:44 +00:00
2010-11-22 18:23:44 +00:00
2010-11-22 18:23:44 +00:00
2010-11-22 18:23:44 +00:00
2008-08-23 10:51:00 +00:00
2010-11-22 18:23:44 +00:00
2010-03-13 19:22:41 +00:00
2010-11-22 18:23:44 +00:00
2008-08-23 10:51:00 +00:00
2010-04-01 15:19:51 +00:00
2008-08-23 10:51:00 +00:00
2010-03-13 19:22:41 +00:00
2009-06-14 19:45:16 +00:00
2008-08-23 10:51:00 +00:00
2008-08-23 10:51:00 +00:00
2008-08-23 10:51:00 +00:00
2008-08-23 10:51:00 +00:00
2010-11-22 18:23:44 +00:00
2010-11-22 18:23:44 +00:00
2010-12-03 22:59:54 +00:00
2010-11-22 18:23:44 +00:00
2010-03-13 19:22:41 +00:00
2008-08-23 10:51:00 +00:00
2010-04-01 15:19:51 +00:00
2010-12-03 22:59:54 +00:00
2010-11-22 18:23:44 +00:00
2010-11-22 18:23:44 +00:00
2008-08-23 10:51:00 +00:00
2008-08-23 10:51:00 +00:00
2010-03-13 19:22:41 +00:00
2008-08-23 10:51:00 +00:00
2010-03-13 19:22:41 +00:00
2008-08-23 10:51:00 +00:00
2010-11-22 18:23:44 +00:00
2010-11-22 18:23:44 +00:00
2010-11-22 18:23:44 +00:00
2010-11-22 18:23:44 +00:00
2008-08-23 10:51:00 +00:00
2010-03-13 19:22:41 +00:00
2010-11-22 18:23:44 +00:00
2010-03-13 19:22:41 +00:00
2010-03-13 19:22:41 +00:00
2010-03-13 19:22:41 +00:00
2010-03-13 19:22:41 +00:00
2008-08-23 10:51:00 +00:00
2010-03-13 19:22:41 +00:00
2010-03-13 19:22:41 +00:00
2010-11-22 18:23:44 +00:00
2008-08-23 10:51:00 +00:00
2010-11-22 18:23:44 +00:00
2008-08-23 10:51:00 +00:00
2010-03-13 19:22:41 +00:00
2008-08-23 10:51:00 +00:00
2010-03-13 19:22:41 +00:00