Commit ca430ece authored by Matt Caswell's avatar Matt Caswell
Browse files

Update CHANGES and NEWS for the new release 



Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
parent 6e629b5b

CHANGES

+9 −1
Original line number Diff line number Diff line
@@ -4,7 +4,15 @@ 


 Changes between 1.0.2i and 1.0.2j [xx XXX xxxx]



  *)

  *) Missing CRL sanity check



     A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0

     but was omitted from OpenSSL 1.0.2i. As a result any attempt to use

     CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.



     This issue only affects the OpenSSL 1.0.2i

     (CVE-2016-7052)

     [Matt Caswell]



 Changes between 1.0.2h and 1.0.2i [22 Sep 2016]

NEWS

+1 −1
Original line number Diff line number Diff line
@@ -7,7 +7,7 @@ 


  Major changes between OpenSSL 1.0.2i and OpenSSL 1.0.2j [under development]



      o

      o Fix Use After Free for large message sizes (CVE-2016-6309)



  Major changes between OpenSSL 1.0.2h and OpenSSL 1.0.2i [22 Sep 2016]