From 60adbfdea1ee754341d64454274e7aa83bae8971 Mon Sep 17 00:00:00 2001 From: marha Date: Fri, 30 Sep 2011 08:40:25 +0200 Subject: Upgraded to openssl-1.0.0e --- openssl/NEWS | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'openssl/NEWS') diff --git a/openssl/NEWS b/openssl/NEWS index a9c9b7803..672810dcc 100644 --- a/openssl/NEWS +++ b/openssl/NEWS @@ -5,6 +5,14 @@ This file gives a brief overview of the major changes between each OpenSSL release. For more details please read the CHANGES file. + Major changes between OpenSSL 1.0.0d and OpenSSL 1.0.0e: + + o Fix for CRL vulnerability issue CVE-2011-3207 + o Fix for ECDH crashes CVE-2011-3210 + o Protection against EC timing attacks. + o Support ECDH ciphersuites for certificates using SHA2 algorithms. + o Various DTLS fixes. + Major changes between OpenSSL 1.0.0c and OpenSSL 1.0.0d: o Fix for security issue CVE-2011-0014 -- cgit v1.2.3