diff --git a/CHANGES b/CHANGES index f063349a84c00a607367399c3dc52bc1dd004d4b..c76090d41ce2ed48f52d231e2dc6a8ded7faff00 100644 --- a/CHANGES +++ b/CHANGES @@ -190,6 +190,7 @@ *) Fix extension code to avoid race conditions which can result in a buffer overrun vulnerability: resumed sessions must not be modified as they can be shared by multiple threads. CVE-2010-3864 + [Steve Henson] *) Fix WIN32 build system to correctly link an ENGINE directory into a DLL. diff --git a/NEWS b/NEWS index 139c1e02b4509589005c9b5b8c9a404d57f78c04..7bebb8bf13b1b71ed3dfc57d294b5a3f3abaf643 100644 --- a/NEWS +++ b/NEWS @@ -24,7 +24,7 @@ o Fix for security issue CVE-2010-1633. o GOST MAC and CFB fixes. - Major changes between OpenSSL 0.9.8n and OpenSSL 1.0: + Major changes between OpenSSL 0.9.8n and OpenSSL 1.0.0: o RFC3280 path validation: sufficient to process PKITS tests. o Integrated support for PVK files and keyblobs.