summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon Josefsson <simon@josefsson.org>2009-08-14 15:14:37 +0200
committerSimon Josefsson <simon@josefsson.org>2009-08-14 15:14:37 +0200
commitceff57941aa5d16df5855e0c943f4e0128d92fbe (patch)
treeb8153a04f8d3c935b231f52207e21e81f887a8af
parentee2546f9fa8edb9b136309715f6073d17f6102c0 (diff)
downloadgnutls-ceff57941aa5d16df5855e0c943f4e0128d92fbe.tar.gz
Add 2.8.3 entry.
-rw-r--r--NEWS20
1 files changed, 20 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index b02a7c5e79..56c54d7dd5 100644
--- a/NEWS
+++ b/NEWS
@@ -95,6 +95,26 @@ No changes since last version.
** API and ABI modifications:
No changes since last version.
+* Version 2.8.3 (released 2009-08-13)
+
+** libgnutls: Fix patch for NUL in CN/SAN in last release.
+Code intended to be removed would lead to an read-out-bound error in
+some situations. Reported by Tomas Hoger <thoger@redhat.com>. A CVE
+code have been allocated for the vulnerability: [CVE-2009-2730].
+
+** libgnutls: Fix rare failure in gnutls_x509_crt_import.
+The function may fail incorrectly when an earlier certificate was
+imported to the same gnutls_x509_crt_t structure.
+
+** libgnutls-extra, libgnutls-openssl: Fix MinGW cross-compiling build error.
+
+** tests: Made self-test mini-eagain take less time.
+
+** doc: Typo fixes.
+
+** API and ABI modifications:
+No changes since last version.
+
* Version 2.8.2 (released 2009-08-10)
** libgnutls: Fix problem with NUL bytes in X.509 CN and SAN fields.