Update FAQ.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 1b10b774a955999cebfd03f0b720bc7147c14a31..404ac85690e7fd8c1ee1841721b4d129516d6c6c 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2038,6 +2038,10 @@
      This fixes a DoS attack. (CVE-2013-0166)
      [Steve Henson]
 
+  *) Return an error when checking OCSP signatures when key is NULL.
+     This fixes a DoS attack. (CVE-2013-0166)
+     [Steve Henson]
+
   *) Call OCSP Stapling callback after ciphersuite has been chosen, so
      the right response is stapled. Also change SSL_get_certificate()
      so it returns the certificate actually sent.