Remove attribution -- this wasn't my patch, I only edited and applied it.
authorBodo Möller <bodo@openssl.org>
Thu, 26 Nov 2009 17:28:27 +0000 (17:28 +0000)
committerBodo Möller <bodo@openssl.org>
Thu, 26 Nov 2009 17:28:27 +0000 (17:28 +0000)
CHANGES

diff --git a/CHANGES b/CHANGES
index fe9473080b84764522ace6f1c3d5e8766e09f21c..e9662b9fd613813ca34b705d55231646704cb37a 100644 (file)
--- a/CHANGES
+++ b/CHANGES
 
  Changes between 0.9.8h and 0.9.8i  [15 Sep 2008]
 
-  *) Fix NULL pointer dereference if a DTLS server recieved
-     ChangeCipherSpec as first record (CVE-2009-1386)
-     [Bodo Moeller, discovered by Alex Lam]
+  *) Fix NULL pointer dereference if a DTLS server received
+     ChangeCipherSpec as first record (CVE-2009-1386).
+     [PR #1679]
 
   *) Fix a state transitition in s3_srvr.c and d1_srvr.c
      (was using SSL3_ST_CW_CLNT_HELLO_B, should be ..._ST_SW_SRVR_...).