get rid of OpenSSLDie

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 8059e9a02316cdf8178b0dd90768a1110b34779e..5aff39d71fc641594b834ae04c6a5bb64e8d01ed 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,7 +4,10 @@
 
  Changes between 0.9.6e and 0.9.6f  [XX xxx XXXX]
 
-  *)
+  *) Use proper error handling instead of 'assertions' in buffer
+     overflow checks added in 0.9.6e.  This prevents DoS (the
+     assertions could call abort()).
+     [Arne Ansper <arne@ats.cyber.ee>, Bodo Moeller]
 
  Changes between 0.9.6d and 0.9.6e  [30 Jul 2002]