generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Update CHANGES and NEWS

Browse Source 
Updates to CHANGES and NEWS to take account of the latest security fixes.

Reviewed-by: Rich Salz <rsalz@openssl.org>
This commit is contained in:
Matt Caswell
2015-06-10 11:49:31 +01:00
parent 5fbc59cac6
commit 1f31458a77
2 changed files with 71 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
NEWS
View File

@@ -7,7 +7,11 @@
Major changes between OpenSSL 1.0.1m and OpenSSL 1.0.1n [under development]
o
o Malformed ECParameters causes infinite loop (CVE-2015-1788)
o Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789)
o PKCS7 crash with missing EnvelopedContent (CVE-2015-1790)
o CMS verify infinite loop with unknown hash function (CVE-2015-1792)
o Race condition handling NewSessionTicket (CVE-2015-1791)
Major changes between OpenSSL 1.0.1l and OpenSSL 1.0.1m [19 Mar 2015]