update changelog for 2.3.8

This commit is contained in:
Brent Cook 2016-09-23 05:43:04 -05:00
parent 25d8a429c1
commit b67802c2db

View File

@ -28,6 +28,15 @@ history is also available from Git.
LibreSSL Portable Release Notes:
2.3.8 - Security and reliability fixes
* Avoid unbounded memory growth in libssl, which can be triggered by a
TLS client repeatedly renegotiating and sending OCSP Status Request
TLS extensions.
* Avoid falling back to a weak digest for (EC)DH when using SNI with
libssl.
2.3.7 - OCSP fixes
* Fix several issues in the OCSP code that could result in the