summaryrefslogtreecommitdiffstats
path: root/NEWS
AgeCommit message (Collapse)Author
2019-12-20Prepare for 1.0.2v-devOpenSSL_1_0_2-stableMatt Caswell
Reviewed-by: Paul Yang <kaishen.yy@antfin.com>
2019-12-20Prepare for 1.0.2u releaseOpenSSL_1_0_2uMatt Caswell
Reviewed-by: Paul Yang <kaishen.yy@antfin.com>
2019-12-19Updates NEWS for new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/10663)
2019-09-10Prepare for 1.0.2u-devMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2019-09-10Prepare for 1.0.2t releaseOpenSSL_1_0_2tMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2019-09-10Fix the NEWS fileMatt Caswell
The NEWS file was missing an entry for 1.0.2s. This confuses the release scripts - so add an empty entry. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9852)
2019-09-10Remove duplicate CHANGES entryMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9846)
2019-09-10Update CHANGES and NEWS for the new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9843)
2019-05-28Prepare for 1.0.2t-devRichard Levitte
Reviewed-by: Matt Caswell <matt@openssl.org>
2019-05-28Add CHANGES for 1.0.2sRichard Levitte
Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9019)
2019-02-26Prepare for 1.0.2s-devMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2019-02-26Prepare for 1.0.2r releaseOpenSSL_1_0_2rMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2019-02-26Updates CHANGES and NEWS for the new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2018-11-20Prepare for 1.0.2r-devMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2018-11-20Prepare for 1.0.2q releaseOpenSSL_1_0_2qMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2018-11-20Update CHANGES and NEWS for new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/7667)
2018-08-14Prepare for 1.0.2q-devMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2018-08-14Prepare for 1.0.2p releaseOpenSSL_1_0_2pMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2018-08-14Updates to CHANGES and NEWS for the new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/6951)
2018-03-27Prepare for 1.0.2p-devMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2018-03-27Prepare for 1.0.2o releaseOpenSSL_1_0_2oMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2018-03-27Update CHANGES and NEWS for the new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2017-12-07Prepare for 1.0.2o-devMatt Caswell
Reviewed-by: Andy Polyakov <appro@openssl.org>
2017-12-07Prepare for 1.0.2n releaseOpenSSL_1_0_2nMatt Caswell
Reviewed-by: Andy Polyakov <appro@openssl.org>
2017-12-07Update CHANGES and NEWS for the new releaseMatt Caswell
Reviewed-by: Rich Salz <rsalz@openssl.org>
2017-11-02Prepare for 1.0.2n-devMatt Caswell
Reviewed-by: Andy Polyakov <appro@openssl.org>
2017-11-02Prepare for 1.0.2m releaseOpenSSL_1_0_2mMatt Caswell
Reviewed-by: Andy Polyakov <appro@openssl.org>
2017-11-02Update CHANGES and NEWS for new releaseMatt Caswell
Reviewed-by: Andy Polyakov <appro@openssl.org>
2017-05-25Prepare for 1.0.2m-devMatt Caswell
Reviewed-by: Stephen Henson <steve@openssl.org>
2017-05-25Prepare for 1.0.2l releaseOpenSSL_1_0_2lMatt Caswell
Reviewed-by: Stephen Henson <steve@openssl.org>
2017-05-25Update CHANGES and NEWS for new releaseMatt Caswell
Reviewed-by: Kurt Roeckx <kurt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3548)
2017-01-26Prepare for 1.0.2l-devMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2017-01-26Prepare for 1.0.2k releaseOpenSSL_1_0_2kMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2017-01-26Update CHANGES and NEWS for new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-11-10Update CHANGES and NEWSMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-09-26Fix NEWS errorMatt Caswell
The NEWS file referenced the wrong CVE for 1.0.2 Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-09-26Prepare for 1.0.2k-devMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-09-26Prepare for 1.0.2j releaseOpenSSL_1_0_2jMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-09-26Update CHANGES and NEWS for the new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-09-22Prepare for 1.0.2j-devMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-09-22Prepare for 1.0.2i releaseOpenSSL_1_0_2iMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-09-22Updates CHANGES and NEWS for new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-05-03Prepare for 1.0.2i-devMatt Caswell
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-05-03Prepare for 1.0.2h releaseOpenSSL_1_0_2hMatt Caswell
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-05-03Update CHANGES and NEWS for the new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-01Prepare for 1.0.2h-devMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-01Prepare for 1.0.2g releaseOpenSSL_1_0_2gMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-01Update CHANGES and NEWS for new releaseMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-01Disable EXPORT and LOW SSLv3+ ciphers by defaultViktor Dukhovni
Reviewed-by: Emilia Käsper <emilia@openssl.org>
2016-03-01Disable SSLv2 default build, default negotiation and weak ciphers.Viktor Dukhovni
SSLv2 is by default disabled at build-time. Builds that are not configured with "enable-ssl2" will not support SSLv2. Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via the version-flexible SSLv23_method() will need to explicitly call either of: SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2); or SSL_clear_options(ssl, SSL_OP_NO_SSLv2); as appropriate. Even if either of those is used, or the application explicitly uses the version-specific SSLv2_method() or its client or server variants, SSLv2 ciphers vulnerable to exhaustive search key recovery have been removed. Specifically, the SSLv2 40-bit EXPORT ciphers, and SSLv2 56-bit DES are no longer available. Mitigation for CVE-2016-0800 Reviewed-by: Emilia Käsper <emilia@openssl.org>