Author:Luke Yelavich Revision Date:
2008-04-22 10:50:53 UTC
* Use a different priority for libssl0.9.8/restart-services depending on whether
a desktop, or server dist-upgrade is being performed. (LP: #91814)
* Display a system restart required notification bubble on libssl0.9.8 upgrade.
* SECURITY UPDATE: TLS renegotiation flaw (LP: #616759)
- apps/{s_cb,s_client,s_server}.c, doc/ssl/SSL_CTX_set_options.pod,
ssl/{d1_both,d1_clnt,d1_srvr,s3_both,s3_clnt,s3_pkt,s3_srvr,ssl_err,
ssl_lib,t1_lib,t1_reneg}.c, ssl/Makefile, ssl/{ssl3,ssl,ssl_locl,
tls1}.h: backport rfc5746 support from openssl 0.9.8m.
- CVE-2009-3555
* Enable tlsext, and backport some patches from jaunty now that tlsext is
enabled.
- Fix a problem with tlsext preventing firefox 3 from connection.
- Don't add extentions to ssl v3 connections. It breaks with some
other software.