Updatde from stable branch.

[thirdparty/openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 213927b375aabe768cec9d8e2242a36e4fa2f04f..dce8985ad8c6630b78a061d972e6a2d1d85ffeae 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -727,7 +727,11 @@
   *) Change 'Configure' script to enable Camellia by default.
      [NTT]
 
- Changes between 0.9.8i and 0.9.8j  [xx XXX xxxx]
+ Changes between 0.9.8i and 0.9.8j  [07 Jan 2009]
+
+  *) Properly check EVP_VerifyFinal() and similar return values
+     (CVE-2008-5077).
+     [Ben Laurie, Bodo Moeller, Google Security Team]
 
   *) Allow the CHIL engine to be loaded, whether the application is
      multithreaded or not. (This does not release the developer from the