X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=CHANGES;h=dce8985ad8c6630b78a061d972e6a2d1d85ffeae;hp=213927b375aabe768cec9d8e2242a36e4fa2f04f;hb=bab534057b855a7dbf98261d494897b3542bd9d5;hpb=cec2af75102df52c2f270b3751e3487f47fccb6c diff --git a/CHANGES b/CHANGES index 213927b375..dce8985ad8 100644 --- a/CHANGES +++ b/CHANGES @@ -727,7 +727,11 @@ *) Change 'Configure' script to enable Camellia by default. [NTT] - Changes between 0.9.8i and 0.9.8j [xx XXX xxxx] + Changes between 0.9.8i and 0.9.8j [07 Jan 2009] + + *) Properly check EVP_VerifyFinal() and similar return values + (CVE-2008-5077). + [Ben Laurie, Bodo Moeller, Google Security Team] *) Allow the CHIL engine to be loaded, whether the application is multithreaded or not. (This does not release the developer from the