From 69968ab38e0a03a66e96a4d48d51cc74a5c64473 Mon Sep 17 00:00:00 2001 From: Theo Buehler Date: Tue, 8 Dec 2020 18:49:51 +0100 Subject: [PATCH] Add a few more bug fixes to the ChangeLog --- ChangeLog | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/ChangeLog b/ChangeLog index d65412e..0a7dc36 100644 --- a/ChangeLog +++ b/ChangeLog @@ -33,6 +33,18 @@ LibreSSL Portable Release Notes: * Malformed ASN.1 in a certificate revocation list or a timestamp response token can lead to a NULL pointer dereference. + Bug fixes + + * Move point-on-curve check to set_affine_coordinates to avoid + verifying ECDSA signatures with unchecked public keys. + + * Fix SSL_is_server() to behave as documented by re-introducing the + client-specific methods. + + * Avoid undefined behavior due to memcpy(NULL, NULL, 0). + + * Mark a few more internal static tables const. + 3.3.0 - Development release * Make openssl(1) s_server ignore -4 and -6 for compatibility with