This entry was in 0.9.8m changelog but missing from here, since it's
security relevent we'd better list it.
diff --git a/CHANGES b/CHANGES
index 3caa7c7..8f8e794 100644
--- a/CHANGES
+++ b/CHANGES
@@ -945,7 +945,10 @@
could be crashed if the relevant tables were not present (e.g. chrooted).
[Tomas Hoger <thoger@redhat.com>]
- Changes between 0.9.8l and 0.9.8m [xx XXX xxxx]
+ Changes between 0.9.8l and 0.9.8m [25 Feb 2010]
+
+ *) Always check bn_wexpend() return values for failure. (CVE-2009-3245)
+ [Martin Olsson, Neel Mehta]
*) Fix X509_STORE locking: Every 'objs' access requires a lock (to
accommodate for stack sorting, always a write lock!).
