summaryrefslogtreecommitdiffstats
path: root/NEWS.md
diff options
context:
space:
mode:
authorDr. Matthias St. Pierre <matthias.st.pierre@ncp-e.com>2020-09-24 07:58:52 +0200
committerDr. Matthias St. Pierre <matthias.st.pierre@ncp-e.com>2020-10-06 19:35:46 +0200
commit6ffc312776f039cf150d4b2bcbc1a804ad334179 (patch)
tree7a227e5b7162d1dbbbb86ea1704118056e3cd856 /NEWS.md
parent5357c10624bedaeed984ef4ff370096911ee2ddf (diff)
Update CHANGES and NEWS for 1.1.1h release
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/12967)
Diffstat (limited to 'NEWS.md')
-rw-r--r--NEWS.md19
1 files changed, 18 insertions, 1 deletions
diff --git a/NEWS.md b/NEWS.md
index 4b0171fb50..632c8d9185 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -72,10 +72,26 @@ OpenSSL 3.0
OpenSSL 1.1.1
-------------
-### Major changes between OpenSSL 1.1.1e and OpenSSL 1.1.1f [under development]
+### Major changes between OpenSSL 1.1.1h and OpenSSL 1.1.1i [under development]
*
+### Major changes between OpenSSL 1.1.1g and OpenSSL 1.1.1h [22 Sep 2020]
+
+ * Disallow explicit curve parameters in verifications chains when
+ X509_V_FLAG_X509_STRICT is used
+ * Enable 'MinProtocol' and 'MaxProtocol' to configure both TLS and DTLS
+ contexts
+ * Oracle Developer Studio will start reporting deprecation warnings
+
+### Major changes between OpenSSL 1.1.1f and OpenSSL 1.1.1g [21 Apr 2020]
+
+ * Fixed segmentation fault in SSL_check_chain() ([CVE-2020-1967][])
+
+### Major changes between OpenSSL 1.1.1e and OpenSSL 1.1.1f [31 Mar 2020]
+
+ * Revert the unexpected EOF reporting via SSL_ERROR_SSL
+
### Major changes between OpenSSL 1.1.1d and OpenSSL 1.1.1e [17 Mar 2020]
* Fixed an overflow bug in the x64_64 Montgomery squaring procedure
@@ -1309,6 +1325,7 @@ OpenSSL 0.9.x
<!-- Links -->
+[CVE-2020-1967]: https://www.openssl.org/news/vulnerabilities.html#CVE-2020-1967
[CVE-2019-1563]: https://www.openssl.org/news/vulnerabilities.html#CVE-2019-1563
[CVE-2019-1559]: https://www.openssl.org/news/vulnerabilities.html#CVE-2019-1559
[CVE-2019-1552]: https://www.openssl.org/news/vulnerabilities.html#CVE-2019-1552