diff options
| author | Bodo Möller <bodo@openssl.org> | 2010-02-23 10:36:41 +0000 |
|---|---|---|
| committer | Bodo Möller <bodo@openssl.org> | 2010-02-23 10:36:41 +0000 |
| commit | 3e4da3f7cbb728cf6574c164954c45070c1776a6 (patch) | |
| tree | adeb2cc0b208a0966b130a253a3b820cc90f540e /CHANGES | |
| parent | 53b5d04715b6718bb4e609b7bd887495a480d8e5 (diff) | |
Always check bn_wexpend() return values for failure (CVE-2009-3245).
(The CHANGES entry covers the change from PR #2111 as well, submitted by
Martin Olsson.)
Submitted by: Neel Mehta
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 3 |
1 files changed, 3 insertions, 0 deletions
@@ -4,6 +4,9 @@ Changes between 0.9.8l and 0.9.8m [xx XXX xxxx] + *) Always check bn_wexpend() return values for failure. (CVE-2009-3245) + [Martin Olsson, Neel Mehta] + *) Fix X509_STORE locking: Every 'objs' access requires a lock (to accommodate for stack sorting, always a write lock!). [Bodo Moeller] |