From fb75f349b75c8dda6edd56a6d3396153099cc2d8 Mon Sep 17 00:00:00 2001 From: "Mark J. Cox" Date: Fri, 12 Mar 2010 08:36:44 +0000 Subject: [PATCH] This entry was in 0.9.8m changelog but missing from here, since it's security relevent we'd better list it. --- CHANGES | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index 3caa7c7296..8f8e794018 100644 --- a/CHANGES +++ b/CHANGES @@ -945,7 +945,10 @@ could be crashed if the relevant tables were not present (e.g. chrooted). [Tomas Hoger ] - Changes between 0.9.8l and 0.9.8m [xx XXX xxxx] + Changes between 0.9.8l and 0.9.8m [25 Feb 2010] + + *) Always check bn_wexpend() return values for failure. (CVE-2009-3245) + [Martin Olsson, Neel Mehta] *) Fix X509_STORE locking: Every 'objs' access requires a lock (to accommodate for stack sorting, always a write lock!). -- 2.25.1