Synchronise with the 0.9.6 branch.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index aae4a8ace27f129996915c8aa7727c09f77f5f26..0ec25f25bde6c4081225fb106bfa2674d837c6a5 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -12,6 +12,9 @@
          *) applies to 0.9.6a/0.9.6b/0.9.6c and 0.9.7
          +) applies to 0.9.7 only
 
+  +) SECURITY: remove unsafe setjmp/signal interaction from ui_openssl.c.
+     [Ben Laurie and Theo de Raadt]
+
   *) Fix BN_rand_range bug pointed out by Dominikus Scherkl
      <Dominikus.Scherkl@biodata.com>.  (The previous implementation
      worked incorrectly for those cases where  range = 10..._2  and