Add an entry to the CHANGES for the d2i_X509_PUBKEY fix

The commit 5dc40a83c7 forgot
to add a short description to the CHANGES file.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/8144)

(cherry picked from commit b2aea0e3d9)
This commit is contained in:
Bernd Edlinger 2019-01-30 16:20:31 +01:00
parent 243ff51cc6
commit 63b596e38d

View file

@ -16,6 +16,10 @@
interoperability with such broken implementations. However, enabling interoperability with such broken implementations. However, enabling
this switch breaks interoperability with correct implementations. this switch breaks interoperability with correct implementations.
*) Fix a use after free bug in d2i_X509_PUBKEY when overwriting a
re-used X509_PUBKEY object if the second PUBKEY is malformed.
[Bernd Edlinger]
*) Move strictness check from EVP_PKEY_asn1_new() to EVP_PKEY_asn1_add0(). *) Move strictness check from EVP_PKEY_asn1_new() to EVP_PKEY_asn1_add0().
[Richard Levitte] [Richard Levitte]