generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Update CHANGES and NEWS for the new release

Browse Source 
Reviewed-by: Stephen Henson <steve@openssl.org>
This commit is contained in:
Matt Caswell 2015-07-02 15:38:32 +01:00
parent 9dee5244e1
commit 5627e0f77d
2 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
CHANGES
View File

@ -4,7 +4,18 @@
Changes between 1.0.2c and 1.0.2d [xx XXX xxxx]
*)
*) Alternate chains certificate forgery
During certificate verfification, OpenSSL will attempt to find an
alternative certificate chain if the first attempt to build such a chain
fails. An error in the implementation of this logic can mean that an
attacker could cause certain checks on untrusted certificates to be
bypassed, such as the CA flag, enabling them to use a valid leaf
certificate to act as a CA and "issue" an invalid certificate.
This issue was reported to OpenSSL by Adam Langley/David Benjamin
(Google/BoringSSL).
[Matt Caswell]
Changes between 1.0.2b and 1.0.2c [12 Jun 2015]

2
NEWS
View File

@ -7,7 +7,7 @@
Major changes between OpenSSL 1.0.2c and OpenSSL 1.0.2d [under development]
o
o Alternate chains certificate forgery (CVE-2015-1793)
Major changes between OpenSSL 1.0.2b and OpenSSL 1.0.2c [12 Jun 2015]