zzy/openssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Sync CHANGES.md and NEWS.md with 3.1 branch

Browse Source 
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22647)

(cherry picked from commit 2d0d3edb04ab0fa53e30e3cbdd114de9933d5361)
This commit is contained in:
Tomas Mraz 2023-11-07 15:14:34 +01:00
parent e1c15a8abe
commit 96ee2c38ad
2 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
CHANGES.md
View File

@ -486,9 +486,13 @@ OpenSSL 3.2
OpenSSL 3.1 OpenSSL 3.1
----------- -----------
### Changes between 3.1.3 and 3.1.4 [xx XXX xxxx] ### Changes between 3.1.4 and 3.1.5 [xx XXX xxxx]
* Fix incorrect key and IV resizing issues when calling EVP_EncryptInit_ex2(), * none yet
### Changes between 3.1.3 and 3.1.4 [24 Oct 2023]
* Fix incorrect key and IV resizing issues when calling EVP_EncryptInit_ex2(),
EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() with OSSL_PARAM parameters EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() with OSSL_PARAM parameters
that alter the key or IV length ([CVE-2023-5363]). that alter the key or IV length ([CVE-2023-5363]).

6
NEWS.md
View File

@ -60,7 +60,11 @@ OpenSSL 3.2
OpenSSL 3.1 OpenSSL 3.1
----------- -----------
### Major changes between OpenSSL 3.1.3 and OpenSSL 3.1.4 [under development] ### Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [under development]
* none
### Major changes between OpenSSL 3.1.3 and OpenSSL 3.1.4 [24 Oct 2023]
* Mitigate incorrect resize handling for symmetric cipher keys and IVs. * Mitigate incorrect resize handling for symmetric cipher keys and IVs.
([CVE-2023-5363]) ([CVE-2023-5363])