update for openssl
Specially crafted MIME headers could crash openssl's ASN.1 parser
-
Submitted by
Guanjun He (gjhe)
Fixed bugs
bnc#748738
Tolerate bad MIME headers in openssl's ans1 parser.
CVE-CVE-2006-7250
The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.
