commit bab534057b855a7dbf98261d494897b3542bd9d5
author Dr. Stephen Henson <steve@openssl.org> Wed Jan 07 23:44:27 2009 +0000
committer Dr. Stephen Henson <steve@openssl.org> Wed Jan 07 23:44:27 2009 +0000
tree 8f339a962fce59f79aca9d68eee75304b885d551
parent cec2af75102df52c2f270b3751e3487f47fccb6c

Updatde from stable branch.

CHANGES

diff --git a/CHANGES b/CHANGES
index 213927b..dce8985 100644
--- a/CHANGES
+++ b/CHANGES
@@ -727,7 +727,11 @@
   *) Change 'Configure' script to enable Camellia by default.
      [NTT]
 
- Changes between 0.9.8i and 0.9.8j  [xx XXX xxxx]
+ Changes between 0.9.8i and 0.9.8j  [07 Jan 2009]
+
+  *) Properly check EVP_VerifyFinal() and similar return values
+     (CVE-2008-5077).
+     [Ben Laurie, Bodo Moeller, Google Security Team]
 
   *) Allow the CHIL engine to be loaded, whether the application is
      multithreaded or not. (This does not release the developer from the