diff options
| author | Matt Caswell <matt@openssl.org> | 2016-09-21 21:59:49 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2016-09-22 09:27:45 +0100 |
| commit | 39c136cc53d7b6fafdd1a0b52c035fd24358e01c (patch) | |
| tree | a29ceb7093750bf7bfc8d50f26336de435c8b084 /NEWS | |
| parent | 41b42807726e340538701021cdc196672330f4db (diff) | |
| download | openssl-new-39c136cc53d7b6fafdd1a0b52c035fd24358e01c.tar.gz | |
Updates CHANGES and NEWS for new release
Reviewed-by: Richard Levitte <levitte@openssl.org>
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 11 |
1 files changed, 10 insertions, 1 deletions
@@ -5,10 +5,19 @@ This file gives a brief overview of the major changes between each OpenSSL release. For more details please read the CHANGES file. - Major changes between OpenSSL 1.1.0 and OpenSSL 1.1.1 [under development] + Major changes between OpenSSL 1.1.0a and OpenSSL 1.1.1 [under development] o + Major changes between OpenSSL 1.1.0 and OpenSSL 1.1.0a [22 Sep 2016] + + o OCSP Status Request extension unbounded memory growth (CVE-2016-6304) + o SSL_peek() hang on empty record (CVE-2016-6305) + o Excessive allocation of memory in tls_get_message_header() + (CVE-2016-6307) + o Excessive allocation of memory in dtls1_preprocess_fragment() + (CVE-2016-6308) + Major changes between OpenSSL 1.0.2h and OpenSSL 1.1.0 [25 Aug 2016] o Copyright text was shrunk to a boilerplate that points to the license |