Commit 7b775145 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

update NEWS

parent 7183aa6b
Loading
Loading
Loading
Loading
+8 −0
Original line number Diff line number Diff line
@@ -5,6 +5,14 @@
  This file gives a brief overview of the major changes between each OpenSSL
  release. For more details please read the CHANGES file.

  Major changes between OpenSSL 0.9.8r and OpenSSL 0.9.8s:

      o Fix for DTLS plaintext recovery attack CVE-2011-4108
      o Fix policy check double free error CVE-2011-4109
      o Clear block padding bytes of SSL 3.0 records CVE-2011-4576
      o Only allow one SGC handshake restart for SSL/TLS CVE-2011-4619
      o Check for malformed RFC3779 data CVE-2011-4577

  Major changes between OpenSSL 0.9.8q and OpenSSL 0.9.8r:

      o Fix for security issue CVE-2011-0014