update version and changelog for 2.1.9

This commit is contained in:
Brent Cook 2015-12-05 13:13:12 -06:00
parent 6494230957
commit 5b093cd0c8
2 changed files with 19 additions and 1 deletions

View File

@ -31,10 +31,28 @@ LibreSSL Portable Release Notes:
This release primarily addresses a number of security issues in coordination This release primarily addresses a number of security issues in coordination
with the OpenSSL project. with the OpenSSL project.
2.1.9 - Reliability Update
* Fixes from OpenSSL 1.0.1q
- CVE-2015-3194 - NULL pointer dereference in client side certificate
validation.
- CVE-2015-3195 - Memory leak in PKCS7 - not reachable from TLS/SSL
* The following OpenSSL CVEs did not apply to LibreSSL
- CVE-2015-3193 - Carry propagating bug in the x86_64 Montgomery squaring
procedure.
- CVE-2015-3196 - Double free race condition of the identify hint data.
See https://marc.info/?l=openbsd-announce&m=144925068504102
2.1.8 - Security Update 2.1.8 - Security Update
* Fixes for a memory leak and out-of-bounds access in OBJ_obj2txt * Fixes for a memory leak and out-of-bounds access in OBJ_obj2txt
reported by Qualys Security. reported by Qualys Security.
- CVE-2015-5333 - memory leak in OBJ_obj2txt
- CVE-2015-5334 - 1-byte buffer overflow in OBJ_obj2txt
See http://www.openwall.com/lists/oss-security/2015/10/16/1
2.1.7 - Security Update 2.1.7 - Security Update

View File

@ -1 +1 @@
2.1.8 2.1.9