GitHub PushEvent at 2014-12-05 16:00:13
Repository: openssl
Actor: LutzJaenicke
Payload: {"shas":[["321ba85899ce7246db3791457c711ad586b6d3f8","6521fc25e7624eef7c3a0d89b71de7e612d27d37@openssl.org","Reject elliptic curve lists of odd lengths.\n\nThe Supported Elliptic Curves extension contains a vector of NamedCurves\nof 2 bytes each, so the total length must be even. Accepting odd-length\nlists was observed to lead to a non-exploitable one-byte out-of-bounds\nread in the latest development branches (1.0.2 and master). Released\nversions of OpenSSL are not affected.\n\nThanks to Felix Groebert of the Google Security Team for reporting this issue.\n\nReviewed-by: Matt Caswell <matt@openssl.org>\n(cherry picked from commit 33d5ba862939ff8db70a9e36fc9a326fab3e8d98)","Emilia Kasper",true]],"size":1,"ref":"refs/heads/OpenSSL_1_0_1-stable","head":"321ba85899ce7246db3791457c711ad586b6d3f8"}