From a89681418780095c3a8d0786bedfa43e4afb2349 Mon Sep 17 00:00:00 2001 From: Brent Cook Date: Fri, 23 Sep 2016 05:40:01 -0500 Subject: Update changelog --- ChangeLog | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/ChangeLog b/ChangeLog index 6ec28e0..0c5a934 100644 --- a/ChangeLog +++ b/ChangeLog @@ -28,6 +28,19 @@ history is also available from Git. LibreSSL Portable Release Notes: +2.4.3 - Bug fixes and reliability improvements + + * Reverted change that cleans up the EVP cipher context in + EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies on the + previous behaviour. + + * Avoid unbounded memory growth in libssl, which can be triggered by a + TLS client repeatedly renegotiating and sending OCSP Status Request + TLS extensions. + + * Avoid falling back to a weak digest for (EC)DH when using SNI with + libssl. + 2.4.2 - Bug fixes and improvements * Fixed loading default certificate locations with openssl s_client. -- cgit v1.2.3-55-g6feb