From 271ad075ddfa512d18856ef02cfb260771fefedb Mon Sep 17 00:00:00 2001 From: Brent Cook Date: Sat, 5 Dec 2015 13:15:46 -0600 Subject: update ChangeLog for 2.2.5 --- ChangeLog | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/ChangeLog b/ChangeLog index 32c76ab..63d714e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -28,12 +28,31 @@ history is also available from Git. LibreSSL Portable Release Notes: +2.2.5 - Reliability Update + + * Fixes from OpenSSL 1.0.1q + - CVE-2015-3194 - NULL pointer dereference in client side certificate + validation. + - CVE-2015-3195 - Memory leak in PKCS7 - not reachable from TLS/SSL + + * The following OpenSSL CVEs did not apply to LibreSSL + - CVE-2015-3193 - Carry propagating bug in the x86_64 Montgomery + squaring procedure. + - CVE-2015-3196 - Double free race condition of the identify hint + data. + + See https://marc.info/?l=openbsd-announce&m=144925068504102 + 2.2.4 - Build and bug fixes * Backported build fixes for CMake on Windows, OSX and Linux * Fixes for a memory leak and out-of-bounds access in OBJ_obj2txt reported by Qualys Security. + - CVE-2015-5333 - memory leak in OBJ_obj2txt + - CVE-2015-5334 - 1-byte buffer overflow in OBJ_obj2txt + + See http://www.openwall.com/lists/oss-security/2015/10/16/1 2.2.3 - Bug fixes, build enhancements -- cgit v1.2.3-55-g6feb