Make it possible to override CC.

[oweals/openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index f02a6d356a0adae2c1922f4b8788b520b4b6353d..dfcb97f81ead2f5739d85db6e3284b945a7640a4 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,7 +2,18 @@
  OpenSSL CHANGES
  _______________
 
- Changes between 0.9.8i and 0.9.8j  [xx XXX xxxx]
+ Changes between 0.9.8j and 0.9.8k  [xx XXX xxxx]
+
+  *) Allow CC in the environment to override the automatically chosen
+     compiler. Note that nothing is done to ensure flags work with the
+     chosen compiler.
+     [Ben Laurie]
+
+ Changes between 0.9.8i and 0.9.8j  [07 Jan 2009]
+
+  *) Properly check EVP_VerifyFinal() and similar return values
+     (CVE-2008-5077).
+     [Ben Laurie, Bodo Moeller, Google Security Team]
 
   *) Enable TLS extensions by default.
      [Ben Laurie]