PR: 2386

[oweals/openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index aad698c5f87c357b304000961bff3770446ec2a5..6c302f77875fdae5ecf29aafb3d036c979fd48b6 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,6 +2,13 @@
  OpenSSL CHANGES
  _______________
 
+ Changes between 1.0.0b and 1.0.0c  [xx XXX xxxx]
+
+  *) Fixed J-PAKE implementation error, originally discovered by
+     Sebastien Martini, further info and confirmation from Stefan
+     Arentz and Feng Hao. Note that this fix is a security fix. CVE-2010-4252
+     [Ben Laurie]
+
  Changes between 1.0.0a and 1.0.0b  [16 Nov 2010]
 
   *) Fix extension code to avoid race conditions which can result in a buffer