Fixed valgrind complaint due to BN_consttime_swap reading uninitialised data.

[oweals/openssl.git] / FAQ

diff --git a/FAQ b/FAQ
index a944640fbfe04618e56d3bd61efafcc28e8d2254..f8ea604273a53f8354f17a768d806fa1a3541aed 100644 (file)
--- a/FAQ
+++ b/FAQ
@@ -83,7 +83,7 @@ OpenSSL  -  Frequently Asked Questions
 * Which is the current version of OpenSSL?
 
 The current version is available from <URL: http://www.openssl.org>.
 * Which is the current version of OpenSSL?
 
 The current version is available from <URL: http://www.openssl.org>.

-OpenSSL 1.0.1d was released on Feb 5th, 2013.
+OpenSSL 1.0.1e was released on Feb 11th, 2013.

 
 In addition to the current stable release, you can also access daily
 snapshots of the OpenSSL development version at <URL:
 
 In addition to the current stable release, you can also access daily
 snapshots of the OpenSSL development version at <URL:


@@ -113,11 +113,6 @@ that came with the version of OpenSSL you are using. The pod format
 documentation is included in each OpenSSL distribution under the docs
 directory.
 
 documentation is included in each OpenSSL distribution under the docs
 directory.
 

-For information on parts of libcrypto that are not yet documented, you
-might want to read Ariel Glenn's documentation on SSLeay 0.9, OpenSSL's
-predecessor, at <URL: http://www.columbia.edu/~ariel/ssleay/>.  Much
-of this still applies to OpenSSL.
-

 There is some documentation about certificate extensions and PKCS#12
 in doc/openssl.txt
 
 There is some documentation about certificate extensions and PKCS#12
 in doc/openssl.txt
 


@@ -768,6 +763,9 @@ openssl-security@openssl.org if you don't get a prompt reply at least
 acknowledging receipt then resend or mail it directly to one of the
 more active team members (e.g. Steve).
 
 acknowledging receipt then resend or mail it directly to one of the
 more active team members (e.g. Steve).
 

+Note that bugs only present in the openssl utility are not in general
+considered to be security issues. 
+

 [PROG] ========================================================================
 
 * Is OpenSSL thread-safe?
 [PROG] ========================================================================
 
 * Is OpenSSL thread-safe?