tree 7ad3483f5c37f77f2d0aa79772c0d07e2c5394dd
parent 29c3fc5d8f9e14e10783ab0ecc1bd15e1144cd07
author Christian Heimes <christian@cheimes.de> 1376693687 +0200
committer Christian Heimes <christian@cheimes.de> 1376693687 +0200

Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
GENERAL_NAME_print() function to get the string represention of ASN.1
strings for rfc822Name (email), dNSName (DNS) and
uniformResourceIdentifier (URI).