-
Tue Apr 08 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34
- fix CVE-2014-0160 - information disclosure in TLS heartbeat extension
-
Fri Feb 14 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-33
- use the key length from configuration file if req -newkey rsa is invoked
-
Thu Feb 13 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-32
- avoid unnecessary reseeding in BN_rand in the FIPS mode
-
Wed Feb 12 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-31
- print ephemeral key size negotiated in TLS handshake (#1057715)
- add DH_compute_key_padded needed for FIPS CAVS testing
- make expiration and key length changeable by DAYS and KEYLEN
variables in the certificate Makefile (#1058108)
- change default hash to sha256 (#1062325)
- lower the actual 3des strength so it is sorted behind aes128 (#1056616)
-
Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1:1.0.1e-30
- Mass rebuild 2014-01-24
-
Wed Jan 15 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-29
- rebuild with -O3 on ppc64 architecture
-
Tue Jan 07 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-28
- fix CVE-2013-4353 - Invalid TLS handshake crash
- fix CVE-2013-6450 - possible MiTM attack on DTLS1
-
Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 1:1.0.1e-27
- Mass rebuild 2013-12-27
-
Fri Dec 20 2013 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
- fix CVE-2013-6449 - crash when version in SSL structure is incorrect
- drop weak ciphers from the default TLS ciphersuite list
- add back some symbols that were dropped with update to 1.0.1 branch
- more FIPS validation requirement changes
-
Tue Nov 19 2013 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-25
- fix locking and reseeding problems with FIPS drbg