PR: 2314

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 4d7834360121cba7b3ae9511a4b592c17240ad4f..ae47318517227310f93848a3708de9e465e0ffb6 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -893,6 +893,9 @@
   
  Changes between 0.9.8o and 0.9.8p [xx XXX xxxx]
 
+  *) Fix for double free bug in ssl/s3_clnt.c CVE-2010-2939
+     [Steve Henson]
+
   *) Don't reencode certificate when calculating signature: cache and use
      the original encoding instead. This makes signature verification of
      some broken encodings work correctly.