From 1cfd255c9123cdb4637cc9a65c6665fe4a06c6d5 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Thu, 25 Sep 2014 23:28:48 +0100 Subject: Add additional DigestInfo checks. Reencode DigestInto in DER and check against the original: this will reject any improperly encoded DigestInfo structures. Note: this is a precautionary measure, there is no known attack which can exploit this. Thanks to Brian Smith for reporting this issue. Reviewed-by: Tim Hudson --- CHANGES | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'CHANGES') diff --git a/CHANGES b/CHANGES index 845b6be560..19c9f9c519 100644 --- a/CHANGES +++ b/CHANGES @@ -627,6 +627,16 @@ Changes between 1.0.1g and 1.0.1h [5 Jun 2014] + *) Add additional DigestInfo checks. + + Reencode DigestInto in DER and check against the original: this + will reject any improperly encoded DigestInfo structures. + + Note: this is a precautionary measure OpenSSL and no attacks + are currently known. + + [Steve Henson] + *) Fix for SSL/TLS MITM flaw. An attacker using a carefully crafted handshake can force the use of weak keying material in OpenSSL SSL/TLS clients and servers. -- cgit v1.2.3