Fix bug where freed OIDs could be accessed in EVP_cleanup() by
[openssl.git] / CHANGES
diff --git a/CHANGES b/CHANGES
index bb006e21a13be51f0f8016d4543c1e8f19f66406..b33ec3274312c101fe07542224a9576bb85f3c8c 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,10 @@
 
  Changes between 0.9.8a and 0.9.9  [xx XXX xxxx]
 
+  *) Don't free up OIDs in OBJ_cleanup() if they are in use by EVP_MD or
+     EVP_CIPHER structures to avoid later problems in EVP_cleanup().
+     [Steve Henson]
+
   *) New utilities pkey and pkeyparam. These are similar to algorithm specific
      utilities such as rsa, dsa, dsaparam etc except they processes any key
      type.