From 4d4657cb6ba364dfa60681948b0a30c40bee31ca Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Tue, 7 Nov 2023 15:22:00 +0100 Subject: Add CHANGES.md and NEWS.md entry for CVE-2023-5678 Reviewed-by: Richard Levitte Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/22647) (cherry picked from commit 4ee71b4c302a06c24b46a5def1cff2096bd57f0b) --- NEWS.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'NEWS.md') diff --git a/NEWS.md b/NEWS.md index 5808f805a0..a654335049 100644 --- a/NEWS.md +++ b/NEWS.md @@ -62,7 +62,8 @@ OpenSSL 3.1 ### Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [under development] - * none + * Fix excessive time spent in DH check / generation with large Q parameter + value ([CVE-2023-5678]) ### Major changes between OpenSSL 3.1.3 and OpenSSL 3.1.4 [24 Oct 2023] @@ -1519,6 +1520,7 @@ OpenSSL 0.9.x +[CVE-2023-5678]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5678 [CVE-2023-5363]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5363 [CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807 [CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817 -- cgit v1.2.3