diff options
| author | Brent Cook <busterb@gmail.com> | 2023-02-07 10:25:48 -0600 |
|---|---|---|
| committer | Brent Cook <busterb@gmail.com> | 2023-02-07 10:25:48 -0600 |
| commit | d0bfd7476ce462f642aac827cc23bdc2bc78b13b (patch) | |
| tree | c4275dc2c8c9c45b35b49e9ca83194419b333229 /ChangeLog | |
| parent | 1e562926d80ae8006296eb7926de6cbebc32d3ee (diff) | |
| download | portable-3.5.4.tar.gz portable-3.5.4.tar.bz2 portable-3.5.4.zip | |
security updatev3.5.4
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 6 |
1 files changed, 6 insertions, 0 deletions
| @@ -28,6 +28,12 @@ history is also available from Git. | |||
| 28 | 28 | ||
| 29 | LibreSSL Portable Release Notes: | 29 | LibreSSL Portable Release Notes: |
| 30 | 30 | ||
| 31 | 3.5.4 - Stable release | ||
| 32 | |||
| 33 | * Security fix | ||
| 34 | - A malicious certificate revocation list or timestamp response token | ||
| 35 | would allow an attacker to read arbitrary memory. | ||
| 36 | |||
| 31 | 3.5.3 - Reliability fix | 37 | 3.5.3 - Reliability fix |
| 32 | 38 | ||
| 33 | * Fix d2i_ASN1_OBJECT(). A confusion of two CBS resulted in advancing | 39 | * Fix d2i_ASN1_OBJECT(). A confusion of two CBS resulted in advancing |
