From 07b9f6c37148ff87043a8372ee460fbf45446c85 Mon Sep 17 00:00:00 2001 From: Brent Cook Date: Mon, 25 Sep 2017 23:06:21 -0500 Subject: [PATCH] update release notes --- ChangeLog | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/ChangeLog b/ChangeLog index 37ba6cd..84a5c87 100644 --- a/ChangeLog +++ b/ChangeLog @@ -28,6 +28,28 @@ history is also available from Git. LibreSSL Portable Release Notes: +2.6.2 - Bug fixes + + * Provide a useful error with libtls if there are no OCSP URLs in a + peer certificate. + + * Keep track of which keypair is in use by a TLS context, fixing a bug + where a TLS server with SNI would only return the OCSP staple for the + default keypair. Issue reported by William Graeber and confirmed by + Andreas Bartelt. + + * Fixed various issues in the OCSP extension parsing code. + The original code incorrectly passes the pointer allocated via + CBS_stow() (using malloc()) to a d2i_*() function and then calls + free() on the now incremented pointer, most likely resulting in a + crash. This issue was reported by Robert Swiecki who found the issue + using honggfuzz. + + * If tls_config_parse_protocols() is called with a NULL pointer, + return the default protocols instead of crashing - this makes the + behaviour more useful and mirrors what we already do in + tls_config_set_ciphers() et al. + 2.6.1 - Code removal, rewrites * Added a "-T tlscompat" option to nc(1), which enables the use of all