The branch master has been updated
via 8f15d0696303956c316e276146a759541512e7ef (commit)
from 7b17d477171ac28654376447d561f0be8f137f9e (commit)
- Log -----------------------------------------------------------------
commit 8f15d0696303956c316e276146a759541512e7ef
Author: Rich Salz <rs...@akamai.com>
Date: Mon Aug 28 14:00:08 2017 -0400
Add PR link
-----------------------------------------------------------------------
Summary of changes:
news/secadv/20170828.txt | 8 +++++---
1 file changed, 5 insertions(+), 3 deletions(-)
diff --git a/news/secadv/20170828.txt b/news/secadv/20170828.txt
index 02a1cba..c28bc7d 100644
--- a/news/secadv/20170828.txt
+++ b/news/secadv/20170828.txt
@@ -12,8 +12,10 @@ OpenSSL could do a one-byte buffer overread. The most likely
result
would be an erroneous display of the certificate in text format.
As this is a low severity fix, no release is being made. The fix can be
-found in the source repository (1.0.2, 1.1.0, and master branches) in
-the X509v3_addr_get_afi function. This bug has been present since 2006.
+found in the source repository (1.0.2, 1.1.0, and master branches); see
+https://github.com/openssl/openssl/pull/4276. This bug has been present
+since 2006.
+
This issue was found by Google's OSS-Fuzz project on August 22.
The fix was developed by Rich Salz of the OpenSSL development team.
@@ -29,7 +31,7 @@ References
==========
URL for this Security Advisory:
-https://www.openssl.org/news/secadv/20170126.txt
+https://www.openssl.org/news/secadv/20170828.txt
Note: the online version of the advisory may be updated with additional details
over time.
_____
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits
