From 242d48135a12fc9167430f391ba0d27d9ad44c6b Mon Sep 17 00:00:00 2001 From: marha Date: Mon, 14 Apr 2014 23:15:59 +0200 Subject: Updated openssl to version 1.0.1g --- openssl/NEWS | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'openssl/NEWS') diff --git a/openssl/NEWS b/openssl/NEWS index 909fea96c..ed486d146 100644 --- a/openssl/NEWS +++ b/openssl/NEWS @@ -5,8 +5,15 @@ This file gives a brief overview of the major changes between each OpenSSL release. For more details please read the CHANGES file. + Major changes between OpenSSL 1.0.1f and OpenSSL 1.0.1g [7 Apr 2014] + + o Fix for CVE-2014-0160 + o Add TLS padding extension workaround for broken servers. + o Fix for CVE-2014-0076 + Major changes between OpenSSL 1.0.1e and OpenSSL 1.0.1f [6 Jan 2014] + o Don't include gmt_unix_time in TLS server and client random values o Fix for TLS record tampering bug CVE-2013-4353 o Fix for TLS version checking bug CVE-2013-6449 o Fix for DTLS retransmission bug CVE-2013-6450 -- cgit v1.2.3