update version and changelog for 2.1.9v2.1.9OPENBSD_5_7

2 files changed, 19 insertions, 1 deletions

diff --git a/ChangeLog b/ChangeLog
index 79fa9eb..8d4d7ca 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -31,10 +31,28 @@ LibreSSL Portable Release Notes:
 This release primarily addresses a number of security issues in coordination
 with the OpenSSL project.
 
+2.1.9 - Reliability Update
+
+        * Fixes from OpenSSL 1.0.1q
+         - CVE-2015-3194 - NULL pointer dereference in client side certificate
+                           validation.
+         - CVE-2015-3195 - Memory leak in PKCS7 - not reachable from TLS/SSL
+
+        * The following OpenSSL CVEs did not apply to LibreSSL
+         - CVE-2015-3193 - Carry propagating bug in the x86_64 Montgomery squaring
+                           procedure.
+         - CVE-2015-3196 - Double free race condition of the identify hint data.
+
+         See https://marc.info/?l=openbsd-announce&m=144925068504102
+
 2.1.8 - Security Update
 
         * Fixes for a memory leak and out-of-bounds access in OBJ_obj2txt
           reported by Qualys Security.
+         - CVE-2015-5333 - memory leak in OBJ_obj2txt
+         - CVE-2015-5334 - 1-byte buffer overflow in OBJ_obj2txt
+
+         See http://www.openwall.com/lists/oss-security/2015/10/16/1
 
 2.1.7 - Security Update
 
diff --git a/VERSION b/VERSION
index ebf14b4..63a1a1c 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.1.8
+2.1.9