Mirrors/libressl
0
0
Fork 0
mirror of https://github.com/libressl/portable.git synced 2026-01-17 21:51:17 +01:00
Code Issues Packages Projects Releases Wiki Activity

update release notes

Browse Source
This commit is contained in:
Brent Cook
2018-06-13 11:39:22 -05:00
parent 90898c9686
commit e970fbf951
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
ChangeLog
View File

@@ -28,6 +28,19 @@ history is also available from Git.
LibreSSL Portable Release Notes:
2.6.5 - Security fixes
* Avoid a timing side-channel leak when generating DSA and ECDSA
signatures. This is caused by an attempt to do fast modular
arithmetic, which introduces branches that leak information
regarding secret values. Issue identified and reported by Keegan
Ryan of NCC Group.
* Reject excessively large primes in DH key generation. Problem
reported by Guido Vranken to OpenSSL
(https://github.com/openssl/openssl/pull/6457) and based on his
diff.
2.6.4 - Bug fixes
* Make tls_config_parse_protocols() work correctly when passed a NULL