From: Mark J. Cox <mark@openssl.org>
Date: Thu, 28 Feb 2008 13:31:53 +0000 (+0000)
Subject: Missing changelog entry for http://cvs.openssl.org/chngview?cn=16642
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=2b1e0088116e552c06c82cf862d6e50fab2dba5c;p=oweals%2Fopenssl.git

Missing changelog entry for cvs.openssl.org/chngview?cn=16642
---

diff --git a/CHANGES b/CHANGES
index ea8896a370..d421727306 100644
--- a/CHANGES
+++ b/CHANGES
@@ -15,6 +15,10 @@
      in a different context.
      [Bodo Moeller]
 
+  *) Update the SSL_get_shared_ciphers() fix CVE-2006-3738 which was
+     not complete and could lead to a possible single byte overflow
+     (CVE-2007-5135) [Ben Laurie]
+
  Changes between 0.9.7l and 0.9.7m  [23 Feb 2007]
 
   *) Cleanse PEM buffers before freeing them since they may contain