update for 2.3.7

This commit is contained in:
Brent Cook 2016-07-31 17:59:59 -05:00
parent 926aa53242
commit 25d8a429c1

View File

@ -28,6 +28,17 @@ history is also available from Git.
LibreSSL Portable Release Notes:
2.3.7 - OCSP fixes
* Fix several issues in the OCSP code that could result in the
incorrect generation and parsing of OCSP requests. This remediates a
lack of error checking on time parsing in these functions, and
ensures that only GENERALIZEDTIME formats are accepted for OCSP, as
per RFC 6960.
Issues reported, and fixes provided by Kazuki Yamaguchi <k@rhe.jp>
and Kinichiro Inoguchi <kinichiro.inoguchi@gmail.com>
2.3.6 - Security fix
* Correct a problem that prevents the DSA signing algorithm from