diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2010-11-16 14:26:18 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2010-11-16 14:26:18 +0000 |
| commit | 2ae47ddbc27505652b855449b23d80614c864329 (patch) | |
| tree | 3226d51656866b86d24cdfc24a28d673a5268cf1 /CHANGES | |
| parent | 3e8b8b899053124697217173b039ff3e45578c58 (diff) | |
fix CVE-2010-3864
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 5 |
1 files changed, 5 insertions, 0 deletions
@@ -4,6 +4,11 @@ Changes between 0.9.8o and 0.9.8p [xx XXX xxxx] + *) Fix extension code to avoid race conditions which can result in a buffer + overrun vulnerability: resumed sessions must not be modified as they can + be shared by multiple threads. CVE-2010-3864 + [Steve Henson] + *) Fix for double free bug in ssl/s3_clnt.c CVE-2010-2939 [Steve Henson] |