ELSA-2014-1053

Описание

[0.9.8e-27.4]

• fix CVE-2014-0221 - recursion in DTLS code leading to DoS
• fix CVE-2014-3505 - doublefree in DTLS packet processing
• fix CVE-2014-3506 - avoid memory exhaustion in DTLS
• fix CVE-2014-3508 - fix OID handling to avoid information leak
• fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS

[0.9.8e-27.3]

• fix for CVE-2014-0224 - SSL/TLS MITM vulnerability

[0.9.8e-27.1]

• replace expired GlobalSign Root CA certificate in ca-bundle.crt