summaryrefslogtreecommitdiffstats
path: root/CHANGES
diff options
context:
space:
mode:
authorBernd Edlinger <bernd.edlinger@hotmail.de>2019-01-30 16:20:31 +0100
committerBernd Edlinger <bernd.edlinger@hotmail.de>2019-02-02 08:09:00 +0100
commit63b596e38df603c983da188c6ace3e335a116730 (patch)
tree53ccec65e294a7d15e838d5355517dc39ca611bf /CHANGES
parent243ff51cc6757ab56cda4a7f69fbdcddf81141b6 (diff)
Add an entry to the CHANGES for the d2i_X509_PUBKEY fix
The commit 5dc40a83c74be579575a512b30d9c1e0364e6a7b forgot to add a short description to the CHANGES file. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/8144) (cherry picked from commit b2aea0e3d9a15e30ebce8b6da213df4a3f346155)
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES4
1 files changed, 4 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index 261299d44b..81e3f84bde 100644
--- a/CHANGES
+++ b/CHANGES
@@ -16,6 +16,10 @@
interoperability with such broken implementations. However, enabling
this switch breaks interoperability with correct implementations.
+ *) Fix a use after free bug in d2i_X509_PUBKEY when overwriting a
+ re-used X509_PUBKEY object if the second PUBKEY is malformed.
+ [Bernd Edlinger]
+
*) Move strictness check from EVP_PKEY_asn1_new() to EVP_PKEY_asn1_add0().
[Richard Levitte]