summaryrefslogtreecommitdiffstats
path: root/NEWS.md
diff options
context:
space:
mode:
authorTomas Mraz <tomas@openssl.org>2023-09-08 15:28:45 +0200
committerTomas Mraz <tomas@openssl.org>2023-09-11 10:56:48 +0200
commitfb1a6e9dbece8541dffd5a392d0c771afe6b7de8 (patch)
tree33aaa214861e9a44451f2a253a6ca9b093ea404e /NEWS.md
parent9396ef92e7cdb1cd4e7f2244e620c4debeebed1b (diff)
Add CVE-2023-4807 fix to CHANGES.md and NEWS.md
Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22033) (cherry picked from commit 0be7510f49e498532708fd03628fc3fc62ee7875)
Diffstat (limited to 'NEWS.md')
-rw-r--r--NEWS.md4
1 files changed, 3 insertions, 1 deletions
diff --git a/NEWS.md b/NEWS.md
index f12caf627d..c6a538ae39 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -21,7 +21,8 @@ OpenSSL 3.1
### Major changes between OpenSSL 3.1.2 and OpenSSL 3.1.3 [under development]
- * none
+ * Fix POLY1305 MAC implementation corrupting XMM registers on Windows
+ ([CVE-2023-4807])
### Major changes between OpenSSL 3.1.1 and OpenSSL 3.1.2 [1 Aug 2023]
@@ -1468,6 +1469,7 @@ OpenSSL 0.9.x
<!-- Links -->
+[CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807
[CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817
[CVE-2023-3446]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3446
[CVE-2023-2975]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-2975