diff options
| author | Matt Caswell <matt@openssl.org> | 2015-06-10 11:49:31 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2015-06-11 14:52:39 +0100 |
| commit | ab17f6b746b99bab3d9d3728a2ad067b2cf4970e (patch) | |
| tree | e12d2ec095bde7e8c6a6b65468fef9a96b8d2f77 /NEWS | |
| parent | 7bc2aee4f196f9b049416dfb08fc3a271755c0d8 (diff) | |
Update CHANGES and NEWS
Updates to CHANGES and NEWS to take account of the latest security fixes.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 6 |
1 files changed, 5 insertions, 1 deletions
@@ -7,7 +7,11 @@ Major changes between OpenSSL 1.0.2a and OpenSSL 1.0.2b [under development] - o + o Malformed ECParameters causes infinite loop (CVE-2015-1788) + o Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789) + o PKCS7 crash with missing EnvelopedContent (CVE-2015-1790) + o CMS verify infinite loop with unknown hash function (CVE-2015-1792) + o Race condition handling NewSessionTicket (CVE-2015-1791) Major changes between OpenSSL 1.0.2 and OpenSSL 1.0.2a [19 Mar 2015] |