From: Mark J. Cox <mark@openssl.org>
Date: Fri, 12 Mar 2010 08:36:44 +0000 (+0000)
Subject: This entry was in 0.9.8m changelog but missing from here, since it's
X-Git-Tag: OpenSSL-fips-2_0-rc1~1190
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=fb75f349b75c8dda6edd56a6d3396153099cc2d8;p=oweals%2Fopenssl.git

This entry was in 0.9.8m changelog but missing from here, since it's
security relevent we'd better list it.
---

diff --git a/CHANGES b/CHANGES
index 3caa7c7296..8f8e794018 100644
--- a/CHANGES
+++ b/CHANGES
@@ -945,7 +945,10 @@
      could be crashed if the relevant tables were not present (e.g. chrooted).
      [Tomas Hoger <thoger@redhat.com>]
 
- Changes between 0.9.8l and 0.9.8m  [xx XXX xxxx]
+ Changes between 0.9.8l and 0.9.8m  [25 Feb 2010]
+
+  *) Always check bn_wexpend() return values for failure.  (CVE-2009-3245)
+     [Martin Olsson, Neel Mehta]
 
   *) Fix X509_STORE locking: Every 'objs' access requires a lock (to
      accommodate for stack sorting, always a write lock!).