diff options
| author | Brent Cook <bcook@openbsd.org> | 2016-09-23 05:40:01 -0500 |
|---|---|---|
| committer | Brent Cook <bcook@openbsd.org> | 2016-09-23 05:40:01 -0500 |
| commit | c4ebe2518ce876c71ed82562489081df8891afd8 (patch) | |
| tree | dd47a4ee0e7aba5f72c5072579d384d8ad6368fc | |
| parent | 1d36474726ce4d53120e2968209cdb892a194e82 (diff) | |
| download | portable-2.4.3.tar.gz portable-2.4.3.tar.bz2 portable-2.4.3.zip | |
Update changelogv2.4.3
| -rw-r--r-- | ChangeLog | 13 |
1 files changed, 13 insertions, 0 deletions
| @@ -28,6 +28,19 @@ history is also available from Git. | |||
| 28 | 28 | ||
| 29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
| 30 | 30 | ||
| 31 | 2.4.3 - Bug fixes and reliability improvements | ||
| 32 | |||
| 33 | * Reverted change that cleans up the EVP cipher context in | ||
| 34 | EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies on the | ||
| 35 | previous behaviour. | ||
| 36 | |||
| 37 | * Avoid unbounded memory growth in libssl, which can be triggered by a | ||
| 38 | TLS client repeatedly renegotiating and sending OCSP Status Request | ||
| 39 | TLS extensions. | ||
| 40 | |||
| 41 | * Avoid falling back to a weak digest for (EC)DH when using SNI with | ||
| 42 | libssl. | ||
| 43 | |||
| 31 | 2.4.2 - Bug fixes and improvements | 44 | 2.4.2 - Bug fixes and improvements |
| 32 | 45 | ||
| 33 | * Fixed loading default certificate locations with openssl s_client. | 46 | * Fixed loading default certificate locations with openssl s_client. |
