From 9a5e2f16865ab3f17aae5c88035a4f993c808777 Mon Sep 17 00:00:00 2001 From: Brent Cook Date: Sun, 6 Nov 2016 09:21:40 -0600 Subject: update changelog for 2.4.4 --- ChangeLog | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/ChangeLog b/ChangeLog index 0c5a934..743f8c0 100644 --- a/ChangeLog +++ b/ChangeLog @@ -28,6 +28,27 @@ history is also available from Git. LibreSSL Portable Release Notes: +2.4.4 - Reliability improvements + + * Avoid continual processing of an unlimited number of TLS records, + which can cause a denial-of-service condition. + + * In X509_cmp_time(), pass asn1_time_parse() the tag of the field + being parsed so that a malformed GeneralizedTime field is recognized as + an error instead of potentially being interpreted as if it was a valid + UTCTime. + + * Improve ticket validity checking when tlsext_ticket_key_cb() + callback chooses a different HMAC algorithm. + + * Check for packets with a truncated DTLS cookie. + + * Detect zero-length encrypted session data early, instead of when + malloc(0) fails or the HMAC check fails. + + * Check for and handle failure of HMAC_{Update,Final} or + EVP_DecryptUpdate() + 2.4.3 - Bug fixes and reliability improvements * Reverted change that cleans up the EVP cipher context in -- cgit v1.2.3-55-g6feb