{"push_id":607307971,"size":15,"distinct_size":15,"ref":"refs/heads/akamai-master","head":"58144ad2616866d82132d0731d21215130de1912","before":"693890b8db097d883093829e0c11998059205d30","commits":[{"sha":"75690bad9e571ba1b1c883c174a27d8d048260f6","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Remove dead code from crypto\n\nSome miscellaneous removal of dead code from lib crypto.\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(cherry picked from commit b7573c597c1932ef709b2455ffab47348b5c54e5)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/75690bad9e571ba1b1c883c174a27d8d048260f6"},{"sha":"9377f891f1edbed3f6c2f583433b50e42432626e","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Dead code removal from apps\n\nSome miscellaneous removal of dead code from apps. Also fix an issue with\nerror handling with pkcs7.\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(cherry picked from commit 11abf92259e899f4f7da4a3e80781e84b0fb1a64)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/9377f891f1edbed3f6c2f583433b50e42432626e"},{"sha":"c2e73b22bf48b2c48c10d19a52f24230883fa7a0","author":{"email":"5fb523282dd7956571c80524edc2dccfa0bd8234@openssl.org","name":"Richard Levitte"},"message":"Correct the request of debug builds\n\n./config would translate -d into having the target get a 'debug-'\nprefix, and then run './Configure LIST' to find out if such a\ndebugging target exists or not.\n\nWith the recent changes, the separate 'debug-foo' targets are\ndisappearing, and we're giving the normal targets debugging\ncapabilities instead.  Unfortunately, './config' wasn't changed to\nmatch this new behavior.\n\nThis change introduces the arguments '--debug' and '--release' - the\nlatter just for orthogonality - to ./Configure, and ./config now\ntreats -d by adding '--debug' to the options for ./Configure.\n\nReviewed-by: Matt Caswell <matt@openssl.org>\n(cherry picked from commit 9e43c6b5c28731d13afcb4658dc2fa4dd188cc0b)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/c2e73b22bf48b2c48c10d19a52f24230883fa7a0"},{"sha":"a94fe109c1de9fd3e6d9bcbbc97406a01e23f985","author":{"email":"015edf36635e030d5e009e08808a59984e629740@openssl.org","name":"Andy Polyakov"},"message":"Configure: fold related configurations more aggressively and clean-up.\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(cherry picked from commit 7ead0c89185c46378e3ed85c0012d083f4b3039b)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/a94fe109c1de9fd3e6d9bcbbc97406a01e23f985"},{"sha":"3e0aab0903048d3d21843c3f923b51b4f7f4ef64","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Multiblock corrupted pointer fix\n\nOpenSSL 1.0.2 introduced the \"multiblock\" performance improvement. This\nfeature only applies on 64 bit x86 architecture platforms that support AES\nNI instructions. A defect in the implementation of \"multiblock\" can cause\nOpenSSL's internal write buffer to become incorrectly set to NULL when\nusing non-blocking IO. Typically, when the user application is using a\nsocket BIO for writing, this will only result in a failed connection.\nHowever if some other BIO is used then it is likely that a segmentation\nfault will be triggered, thus enabling a potential DoS attack.\n\nCVE-2015-0290\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\nReviewed-by: Andy Polyakov <appro@openssl.org>\n(cherry picked from commit 1d2a18dc5a3b3363e17db5af8b6b0273856ac077)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/3e0aab0903048d3d21843c3f923b51b4f7f4ef64"},{"sha":"e8ffdf1c3757c92f2da81fae0a4d310253684809","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Fix Seg fault in DTLSv1_listen\n\nThe DTLSv1_listen function is intended to be stateless and processes\nthe initial ClientHello from many peers. It is common for user code to\nloop over the call to DTLSv1_listen until a valid ClientHello is received\nwith an associated cookie. A defect in the implementation of DTLSv1_listen\nmeans that state is preserved in the SSL object from one invokation to the\nnext that can lead to a segmentation fault. Erorrs processing the initial\nClientHello can trigger this scenario. An example of such an error could\nbe that a DTLS1.0 only client is attempting to connect to a DTLS1.2 only\nserver.\n\nCVE-2015-0207\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(cherry picked from commit e83ee04bb7de800cdb71d522fa562e99328003a3)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/e8ffdf1c3757c92f2da81fae0a4d310253684809"},{"sha":"7e7da956a7858773928f2a0fde53737e449c8386","author":{"email":"9ce5770b3bb4b2a1d59be2d97e34379cd192299f@openssl.org","name":"Dr. Stephen Henson"},"message":"Free up ADB and CHOICE if already initialised.\n\nCVE-2015-0287\n\nReviewed-by: Tim Hudson <tjh@openssl.org>\nReviewed-by: Emilia Käsper <emilia@openssl.org>\n(cherry picked from commit 8106d61c354430d6bbbd7f8e7840a39efc0f5829)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/7e7da956a7858773928f2a0fde53737e449c8386"},{"sha":"d1af2b2b1b6fa95dde68739fb90c50d8bf4e8f3d","author":{"email":"9ce5770b3bb4b2a1d59be2d97e34379cd192299f@openssl.org","name":"Dr. Stephen Henson"},"message":"Reject invalid PSS parameters.\n\nFix a bug where invalid PSS parameters are not rejected resulting in a\nNULL pointer exception. This can be triggered during certificate\nverification so could be a DoS attack against a client or a server\nenabling client authentication.\n\nThanks to Brian Carpenter for reporting this issues.\n\nCVE-2015-0208\n\nReviewed-by: Tim Hudson <tjh@openssl.org>\n(cherry picked from commit 09f06923e636019c39c807cb59c481375e720556)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/d1af2b2b1b6fa95dde68739fb90c50d8bf4e8f3d"},{"sha":"0a730557da3780cd153f9d9faa89cc37c74ca46d","author":{"email":"9ce5770b3bb4b2a1d59be2d97e34379cd192299f@openssl.org","name":"Dr. Stephen Henson"},"message":"Fix for CVE-2015-0291\n\nIf a client renegotiates using an invalid signature algorithms extension\nit will crash a server with a NULL pointer dereference.\n\nThanks to David Ramos of Stanford University for reporting this bug.\n\nCVE-2015-0291\n\nReviewed-by: Tim Hudson <tjh@openssl.org>\n(cherry picked from commit 34e3edbf3a10953cb407288101fd56a629af22f9)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/0a730557da3780cd153f9d9faa89cc37c74ca46d"},{"sha":"2b6b787f6327a9fd3a57c1066553d63a5b939505","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Fix DHE Null CKE vulnerability\n\nIf client auth is used then a server can seg fault in the event of a DHE\ncipher being used and a zero length ClientKeyExchange message being sent\nby the client. This could be exploited in a DoS attack.\n\nCVE-2015-1787\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(cherry picked from commit d3cc5e610d1719a35cda52c9152134b490a8c944)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/2b6b787f6327a9fd3a57c1066553d63a5b939505"},{"sha":"513ccdb2af4c4e028cd85dd5d20b39c83806f2b4","author":{"email":"9ce5770b3bb4b2a1d59be2d97e34379cd192299f@openssl.org","name":"Dr. Stephen Henson"},"message":"Fix ASN1_TYPE_cmp\n\nFix segmentation violation when ASN1_TYPE_cmp is passed a boolean type. This\ncan be triggered during certificate verification so could be a DoS attack\nagainst a client or a server enabling client authentication.\n\nCVE-2015-0286\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(cherry picked from commit e677e8d13595f7b3287f8feef7676feb301b0e8a)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/513ccdb2af4c4e028cd85dd5d20b39c83806f2b4"},{"sha":"e2ef8d1e42f2c3107093da4778668273a8e247c5","author":{"email":"6521fc25e7624eef7c3a0d89b71de7e612d27d37@openssl.org","name":"Emilia Kasper"},"message":"PKCS#7: avoid NULL pointer dereferences with missing content\n\nIn PKCS#7, the ASN.1 content component is optional.\nThis typically applies to inner content (detached signatures),\nhowever we must also handle unexpected missing outer content\ncorrectly.\n\nThis patch only addresses functions reachable from parsing,\ndecryption and verification, and functions otherwise associated\nwith reading potentially untrusted data.\n\nCorrecting all low-level API calls requires further work.\n\nCVE-2015-0289\n\nThanks to Michal Zalewski (Google) for reporting this issue.\n\nReviewed-by: Steve Henson <steve@openssl.org>\n(cherry picked from commit c225c3cf9bd67297fb0c297768d69cbc03fbdab7)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/e2ef8d1e42f2c3107093da4778668273a8e247c5"},{"sha":"db32cd9045e1a53aae802675946601853f8c56e8","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Update CHANGES\n\nResync CHANGES with the latest version from 1.0.2.\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(cherry picked from commit bdc234f3c362b211d9e9384da93f8a0ff212787e)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/db32cd9045e1a53aae802675946601853f8c56e8"},{"sha":"e74bf996fb15f76fc11be2a714900cce621e9200","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Update NEWS\n\nResync NEWS with the latest version from 1.0.2\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(cherry picked from commit 367eab2f9f1d1131356118507d21534558863365)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/e74bf996fb15f76fc11be2a714900cce621e9200"},{"sha":"58144ad2616866d82132d0731d21215130de1912","author":{"email":"1fa2ef4755a9226cb9a0a4840bd89b158ac71391@openssl.org","name":"Matt Caswell"},"message":"Fix a failure to NULL a pointer freed on error.\n\nReported by the LibreSSL project as a follow on to CVE-2015-0209\n\nReviewed-by: Richard Levitte <levitte@openssl.org>\n(cherry picked from commit 5e5d53d341fd9a9b9cc0a58eb3690832ca7a511f)","distinct":true,"url":"https://api.github.com/repos/akamai/openssl/commits/58144ad2616866d82132d0731d21215130de1912"}]}