Re: [openssl.org #2826] OpenSSL Buffer Overflow Vulnerability Notification

2012-06-01 Thread Ben Laurie
LOL! On Thu, May 31, 2012 at 7:41 PM, David Anthony via RT r...@openssl.org wrote: Hello all, There has been a new security vulnerability we have reported over at Bugtraq (http://seclists.org/bugtraq/2012/May/155) and we feel that it should also be reported to the OpenSSL dev team. If there

[openssl.org #2827] Bug ? with cms option with large files

2012-06-01 Thread Frédéric Vallée via RT
I'm using openssl.exe (last version 1.0.1) for encrypt some files with Windows Seven. My command line is : openssl cms -encrypt -in c:\sc224.pdf -out c:\sc224.pkcs7 -outform DER -aes-128-cbc c:\test.pem I haven't problem for small files but when i try this command line with a file