Skip to content

deps: upgrade to openssl 1.0.1q (v0.10)

Rodrigo Muino Tomonari requested to merge github/fork/bnoordhuis/upgrade-openssl-v0.10 into v0.10

Contains fixes for:

  • CVE-2015-3194 Certificate verify crash with missing PSS parameter
  • CVE-2015-3195 X509_ATTRIBUTE memory leak

(v0.10 is not affected by CVE-2015-3193 and CVE-2015-3196.)

OpenSSL did a character encoding fix-up that I've split off into a separate commit to keep down the noise in the main commit.

R=@nodejs/crypto

CI: https://ci.nodejs.org/job/node-test-pull-request/908/

Merge request reports