{"push_id":610813505,"size":1,"distinct_size":1,"ref":"refs/heads/cm-11.0","head":"9872b5858277c2b6d104c0ad1597e4e3a9cd2aed","before":"13ea96e0f7b06b96689e05142ea0cd9bd2083f45","commits":[{"sha":"9872b5858277c2b6d104c0ad1597e4e3a9cd2aed","author":{"email":"9ce5770b3bb4b2a1d59be2d97e34379cd192299f@openssl.org","name":"Dr. Stephen Henson"},"message":"Fix FREAK attack\n\nCherry picked from OpenSSL git:\n\nOnly allow ephemeral RSA keys in export ciphersuites.\n\nOpenSSL clients would tolerate temporary RSA keys in non-export\nciphersuites. It also had an option SSL_OP_EPHEMERAL_RSA which\nenabled this server side. Remove both options as they are a\nprotocol violation.\n\nThanks to Karthikeyan Bhargavan for reporting this issue.\n(CVE-2015-0204)\nReviewed-by: Matt Caswell <matt@openssl.org>\nReviewed-by: Tim Hudson <tjh@openssl.org>\n\n(cherry picked from commit 4b4c1fcc88aec8c9e001b0a0077d3cd4de1ed0e6)\n\nConflicts:\n\tdoc/ssl/SSL_CTX_set_options.pod\n\nConflicts:\n\tCHANGES\n\tdoc/ssl/SSL_CTX_set_options.pod\n\tdoc/ssl/SSL_CTX_set_tmp_rsa_callback.pod\n\nChange-Id: Iebbc523421c5ce358c2a6189f19dfd0eb9531358\n(cherry picked from commit 6ecdf161df0e2f37b0f5c69ee3b791663a0f2c28)","distinct":true,"url":"https://api.github.com/repos/ThirdProject/android_external_chromium_org_third_party_openssl/commits/9872b5858277c2b6d104c0ad1597e4e3a9cd2aed"}]}