diff options
-rw-r--r-- | CHANGES | 6 | ||||
-rw-r--r-- | FAQ | 2 | ||||
-rw-r--r-- | NEWS | 5 | ||||
-rw-r--r-- | README | 2 | ||||
-rw-r--r-- | STATUS | 3 | ||||
-rw-r--r-- | crypto/opensslv.h | 6 | ||||
-rw-r--r-- | openssl.spec | 2 |
7 files changed, 18 insertions, 8 deletions
@@ -2,7 +2,11 @@ OpenSSL CHANGES _______________ - Changes between 0.9.8i and 0.9.8j [xx XXX xxxx] + Changes between 0.9.8i and 0.9.8j [07 Jan 2009] + + *) Properly check EVP_VerifyFinal() and similar return values + (CVE-2008-5077). + [Ben Laurie, Bodo Moeller, Google Security Team] *) Properly check EVP_VerifyFinal() and similar return values (CVE-2008-5077). @@ -78,7 +78,7 @@ OpenSSL - Frequently Asked Questions * Which is the current version of OpenSSL? The current version is available from <URL: http://www.openssl.org>. -OpenSSL 0.9.8i was released on Sep 15th, 2008. +OpenSSL 0.9.8j was released on Jan 7th, 2009. In addition to the current stable release, you can also access daily snapshots of the OpenSSL development version at <URL: @@ -5,6 +5,11 @@ This file gives a brief overview of the major changes between each OpenSSL release. For more details please read the CHANGES file. + Major changes between OpenSSL 0.9.8i and OpenSSL 0.9.8j: + + o Fix security issue (CVE-2008-5077) + o Merge FIPS 140-2 branch code. + Major changes between OpenSSL 0.9.8g and OpenSSL 0.9.8h: o CryptoAPI ENGINE support. @@ -1,5 +1,5 @@ - OpenSSL 0.9.8i + OpenSSL 0.9.8j Copyright (c) 1998-2008 The OpenSSL Project Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson @@ -1,10 +1,11 @@ OpenSSL STATUS Last modified at - ______________ $Date: 2008/09/15 10:28:12 $ + ______________ $Date: 2009/01/07 10:50:54 $ DEVELOPMENT STATE o OpenSSL 0.9.9: Under development... + o OpenSSL 0.9.8j: Released on January 7th, 2009 o OpenSSL 0.9.8i: Released on September 15th, 2008 o OpenSSL 0.9.8h: Released on May 28th, 2008 o OpenSSL 0.9.8g: Released on October 19th, 2007 diff --git a/crypto/opensslv.h b/crypto/opensslv.h index 60377916ef..09687b5136 100644 --- a/crypto/opensslv.h +++ b/crypto/opensslv.h @@ -25,11 +25,11 @@ * (Prior to 0.9.5a beta1, a different scheme was used: MMNNFFRBB for * major minor fix final patch/beta) */ -#define OPENSSL_VERSION_NUMBER 0x009080a0L +#define OPENSSL_VERSION_NUMBER 0x009080afL #ifdef OPENSSL_FIPS -#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8j-fips-dev xx XXX xxxx" +#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8j-fips 07 Jan 2009" #else -#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8j-dev xx XXX xxxx" +#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8j 07 Jan 2009" #endif #define OPENSSL_VERSION_PTEXT " part of " OPENSSL_VERSION_TEXT diff --git a/openssl.spec b/openssl.spec index a1fa198423..6008c3c9c8 100644 --- a/openssl.spec +++ b/openssl.spec @@ -1,7 +1,7 @@ %define libmaj 0 %define libmin 9 %define librel 8 -%define librev i +%define librev j Release: 1 %define openssldir /var/ssl |