diff options
| author | marha <marha@users.sourceforge.net> | 2012-01-27 20:31:28 +0100 |
|---|---|---|
| committer | marha <marha@users.sourceforge.net> | 2012-01-27 20:31:28 +0100 |
| commit | c6a1477b0092762299491d79b3a8cb094c6456da (patch) | |
| tree | 8458d152a6d4cecd8b2d88f3e7e6950128a53fb7 /openssl/NEWS | |
| parent | eb4c088eb71f93b9639f4ff651523d794f1433f7 (diff) | |
| download | vcxsrv-c6a1477b0092762299491d79b3a8cb094c6456da.tar.gz vcxsrv-c6a1477b0092762299491d79b3a8cb094c6456da.tar.bz2 vcxsrv-c6a1477b0092762299491d79b3a8cb094c6456da.zip | |
update to openssl 1.0.0g
Diffstat (limited to 'openssl/NEWS')
| -rw-r--r-- | openssl/NEWS | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/openssl/NEWS b/openssl/NEWS index 672810dcc..1264201ef 100644 --- a/openssl/NEWS +++ b/openssl/NEWS @@ -5,6 +5,18 @@ This file gives a brief overview of the major changes between each OpenSSL release. For more details please read the CHANGES file. + Major changes between OpenSSL 1.0.0f and OpenSSL 1.0.0g: + + o Fix for DTLS DoS issue CVE-2012-0050 + + Major changes between OpenSSL 1.0.0e and OpenSSL 1.0.0f: + + o Fix for DTLS plaintext recovery attack CVE-2011-4108 + o Clear block padding bytes of SSL 3.0 records CVE-2011-4576 + o Only allow one SGC handshake restart for SSL/TLS CVE-2011-4619 + o Check parameters are not NULL in GOST ENGINE CVE-2012-0027 + o Check for malformed RFC3779 data CVE-2011-4577 + Major changes between OpenSSL 1.0.0d and OpenSSL 1.0.0e: o Fix for CRL vulnerability issue CVE-2011-3207 |