summaryrefslogtreecommitdiffstats
path: root/NEWS
diff options
context:
space:
mode:
authorMatt Caswell <matt@openssl.org>2017-01-24 17:44:30 +0100
committerMatt Caswell <matt@openssl.org>2017-01-26 12:00:28 +0100
commit536454e53bd8ae6a9025e47a7706fa42d9dbfc2f (patch)
tree9ed06b0860eec5eac2a0cc82d29682c2791b5dc6 /NEWS
parentbn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal. (diff)
downloadopenssl-536454e53bd8ae6a9025e47a7706fa42d9dbfc2f.tar.xz
openssl-536454e53bd8ae6a9025e47a7706fa42d9dbfc2f.zip
Update CHANGES and NEWS for new release
Reviewed-by: Richard Levitte <levitte@openssl.org>
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS11
1 files changed, 10 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index e88c5f470b..34312cd052 100644
--- a/NEWS
+++ b/NEWS
@@ -9,11 +9,20 @@
o
- Major changes between OpenSSL 1.1.0a and OpenSSL 1.1.0b [26 Sep 2016]
+ Major changes between OpenSSL 1.1.0c and OpenSSL 1.1.0d [26 Jan 2017]
+
+ o Truncated packet could crash via OOB read (CVE-2017-3731)
+ o Bad (EC)DHE parameters cause a client crash (CVE-2017-3730)
+ o BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
+
+ Major changes between OpenSSL 1.1.0b and OpenSSL 1.1.0c [10 Nov 2016]
o ChaCha20/Poly1305 heap-buffer-overflow (CVE-2016-7054)
o CMS Null dereference (CVE-2016-7053)
o Montgomery multiplication may produce incorrect results (CVE-2016-7055)
+
+ Major changes between OpenSSL 1.1.0a and OpenSSL 1.1.0b [26 Sep 2016]
+
o Fix Use After Free for large message sizes (CVE-2016-6309)
Major changes between OpenSSL 1.1.0 and OpenSSL 1.1.0a [22 Sep 2016]