AArch64 assembly pack: authenticate return addresses.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 261299d44bff5557682e9af7993d134e4b836172..81e3f84bdea092d1c0633db03c95e3b38b2f0199 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -16,6 +16,10 @@
      interoperability with such broken implementations. However, enabling
      this switch breaks interoperability with correct implementations.
 
+  *) Fix a use after free bug in d2i_X509_PUBKEY when overwriting a
+     re-used X509_PUBKEY object if the second PUBKEY is malformed.
+     [Bernd Edlinger]
+
   *) Move strictness check from EVP_PKEY_asn1_new() to EVP_PKEY_asn1_add0().
      [Richard Levitte]