diff options
author | Brent Cook <bcook@openbsd.org> | 2016-09-23 05:40:01 -0500 |
---|---|---|
committer | Brent Cook <bcook@openbsd.org> | 2016-09-23 05:40:01 -0500 |
commit | c4ebe2518ce876c71ed82562489081df8891afd8 (patch) | |
tree | dd47a4ee0e7aba5f72c5072579d384d8ad6368fc /ChangeLog | |
parent | 1d36474726ce4d53120e2968209cdb892a194e82 (diff) | |
download | portable-2.4.3.tar.gz portable-2.4.3.tar.bz2 portable-2.4.3.zip |
Update changelogv2.4.3
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 13 |
1 files changed, 13 insertions, 0 deletions
@@ -28,6 +28,19 @@ history is also available from Git. | |||
28 | 28 | ||
29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
30 | 30 | ||
31 | 2.4.3 - Bug fixes and reliability improvements | ||
32 | |||
33 | * Reverted change that cleans up the EVP cipher context in | ||
34 | EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies on the | ||
35 | previous behaviour. | ||
36 | |||
37 | * Avoid unbounded memory growth in libssl, which can be triggered by a | ||
38 | TLS client repeatedly renegotiating and sending OCSP Status Request | ||
39 | TLS extensions. | ||
40 | |||
41 | * Avoid falling back to a weak digest for (EC)DH when using SNI with | ||
42 | libssl. | ||
43 | |||
31 | 2.4.2 - Bug fixes and improvements | 44 | 2.4.2 - Bug fixes and improvements |
32 | 45 | ||
33 | * Fixed loading default certificate locations with openssl s_client. | 46 | * Fixed loading default certificate locations with openssl s_client. |