| Index: openssl/NEWS
|
| ===================================================================
|
| --- openssl/NEWS (revision 105093)
|
| +++ openssl/NEWS (working copy)
|
| @@ -5,6 +5,81 @@
|
| This file gives a brief overview of the major changes between each OpenSSL
|
| release. For more details please read the CHANGES file.
|
|
|
| + Major changes between OpenSSL 1.0.0e and OpenSSL 1.0.0f:
|
| +
|
| + o Fix for DTLS plaintext recovery attack CVE-2011-4108
|
| + o Clear block padding bytes of SSL 3.0 records CVE-2011-4576
|
| + o Only allow one SGC handshake restart for SSL/TLS CVE-2011-4619
|
| + o Check parameters are not NULL in GOST ENGINE CVE-2012-0027
|
| + o Check for malformed RFC3779 data CVE-2011-4577
|
| +
|
| + Major changes between OpenSSL 1.0.0d and OpenSSL 1.0.0e:
|
| +
|
| + o Fix for CRL vulnerability issue CVE-2011-3207
|
| + o Fix for ECDH crashes CVE-2011-3210
|
| + o Protection against EC timing attacks.
|
| + o Support ECDH ciphersuites for certificates using SHA2 algorithms.
|
| + o Various DTLS fixes.
|
| +
|
| + Major changes between OpenSSL 1.0.0c and OpenSSL 1.0.0d:
|
| +
|
| + o Fix for security issue CVE-2011-0014
|
| +
|
| + Major changes between OpenSSL 1.0.0b and OpenSSL 1.0.0c:
|
| +
|
| + o Fix for security issue CVE-2010-4180
|
| + o Fix for CVE-2010-4252
|
| + o Fix mishandling of absent EC point format extension.
|
| + o Fix various platform compilation issues.
|
| + o Corrected fix for security issue CVE-2010-3864.
|
| +
|
| + Major changes between OpenSSL 1.0.0a and OpenSSL 1.0.0b:
|
| +
|
| + o Fix for security issue CVE-2010-3864.
|
| + o Fix for CVE-2010-2939
|
| + o Fix WIN32 build system for GOST ENGINE.
|
| +
|
| + Major changes between OpenSSL 1.0.0 and OpenSSL 1.0.0a:
|
| +
|
| + o Fix for security issue CVE-2010-1633.
|
| + o GOST MAC and CFB fixes.
|
| +
|
| + Major changes between OpenSSL 0.9.8n and OpenSSL 1.0.0:
|
| +
|
| + o RFC3280 path validation: sufficient to process PKITS tests.
|
| + o Integrated support for PVK files and keyblobs.
|
| + o Change default private key format to PKCS#8.
|
| + o CMS support: able to process all examples in RFC4134
|
| + o Streaming ASN1 encode support for PKCS#7 and CMS.
|
| + o Multiple signer and signer add support for PKCS#7 and CMS.
|
| + o ASN1 printing support.
|
| + o Whirlpool hash algorithm added.
|
| + o RFC3161 time stamp support.
|
| + o New generalised public key API supporting ENGINE based algorithms.
|
| + o New generalised public key API utilities.
|
| + o New ENGINE supporting GOST algorithms.
|
| + o SSL/TLS GOST ciphersuite support.
|
| + o PKCS#7 and CMS GOST support.
|
| + o RFC4279 PSK ciphersuite support.
|
| + o Supported points format extension for ECC ciphersuites.
|
| + o ecdsa-with-SHA224/256/384/512 signature types.
|
| + o dsa-with-SHA224 and dsa-with-SHA256 signature types.
|
| + o Opaque PRF Input TLS extension support.
|
| + o Updated time routines to avoid OS limitations.
|
| +
|
| + Major changes between OpenSSL 0.9.8q and OpenSSL 0.9.8r:
|
| +
|
| + o Fix for security issue CVE-2011-0014
|
| +
|
| + Major changes between OpenSSL 0.9.8p and OpenSSL 0.9.8q:
|
| +
|
| + o Fix for security issue CVE-2010-4180
|
| + o Fix for CVE-2010-4252
|
| +
|
| + Major changes between OpenSSL 0.9.8o and OpenSSL 0.9.8p:
|
| +
|
| + o Fix for security issue CVE-2010-3864.
|
| +
|
| Major changes between OpenSSL 0.9.8n and OpenSSL 0.9.8o:
|
|
|
| o Fix for security issue CVE-2010-0742.
|
| @@ -172,6 +247,11 @@
|
| o Added initial support for Win64.
|
| o Added alternate pkg-config files.
|
|
|
| + Major changes between OpenSSL 0.9.7l and OpenSSL 0.9.7m:
|
| +
|
| + o FIPS 1.1.1 module linking.
|
| + o Various ciphersuite selection fixes.
|
| +
|
| Major changes between OpenSSL 0.9.7k and OpenSSL 0.9.7l:
|
|
|
| o Introduce limits to prevent malicious key DoS (CVE-2006-2940)
|
|
|