Deleted Added
full compact
NEWS (160814) NEWS (162911)
1
2 NEWS
3 ====
4
5 This file gives a brief overview of the major changes between each OpenSSL
6 release. For more details please read the CHANGES file.
7
1
2 NEWS
3 ====
4
5 This file gives a brief overview of the major changes between each OpenSSL
6 release. For more details please read the CHANGES file.
7
8 Major changes between OpenSSL 0.9.7c and OpenSSL 0.9.8d:
9
10 o Introduce limits to prevent malicious key DoS (CVE-2006-2940)
11 o Fix security issues (CVE-2006-2937, CVE-2006-3737, CVE-2006-4343)
12 o Changes to ciphersuite selection algorithm
13
14 Major changes between OpenSSL 0.9.8b and OpenSSL 0.9.8c:
15
16 o Fix Daniel Bleichenbacher forged signature attack, CVE-2006-4339
17 o New cipher Camellia
18
8 Major changes between OpenSSL 0.9.8a and OpenSSL 0.9.8b:
9
10 o Cipher string fixes.
11 o Fixes for VC++ 2005.
12 o Updated ECC cipher suite support.
13 o New functions EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free().
14 o Zlib compression usage fixes.
15 o Built in dynamic engine compilation support on Win32.
16 o Fixes auto dynamic engine loading in Win32.
17
18 Major changes between OpenSSL 0.9.8 and OpenSSL 0.9.8a:
19
19 Major changes between OpenSSL 0.9.8a and OpenSSL 0.9.8b:
20
21 o Cipher string fixes.
22 o Fixes for VC++ 2005.
23 o Updated ECC cipher suite support.
24 o New functions EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free().
25 o Zlib compression usage fixes.
26 o Built in dynamic engine compilation support on Win32.
27 o Fixes auto dynamic engine loading in Win32.
28
29 Major changes between OpenSSL 0.9.8 and OpenSSL 0.9.8a:
30
20 o Fix potential SSL 2.0 rollback, CAN-2005-2969
31 o Fix potential SSL 2.0 rollback, CVE-2005-2969
21 o Extended Windows CE support
22
23 Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.8:
24
25 o Major work on the BIGNUM library for higher efficiency and to
26 make operations more streamlined and less contradictory. This
27 is the result of a major audit of the BIGNUM library.
28 o Addition of BIGNUM functions for fields GF(2^m) and NIST

--- 60 unchanged lines hidden (view full) ---

89 o New BIGNUM blinding.
90 o Added support for the RSA-PSS encryption scheme
91 o Added support for the RSA X.931 padding.
92 o Added support for BSD sockets on NetWare.
93 o Added support for files larger than 2GB.
94 o Added initial support for Win64.
95 o Added alternate pkg-config files.
96
32 o Extended Windows CE support
33
34 Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.8:
35
36 o Major work on the BIGNUM library for higher efficiency and to
37 make operations more streamlined and less contradictory. This
38 is the result of a major audit of the BIGNUM library.
39 o Addition of BIGNUM functions for fields GF(2^m) and NIST

--- 60 unchanged lines hidden (view full) ---

100 o New BIGNUM blinding.
101 o Added support for the RSA-PSS encryption scheme
102 o Added support for the RSA X.931 padding.
103 o Added support for BSD sockets on NetWare.
104 o Added support for files larger than 2GB.
105 o Added initial support for Win64.
106 o Added alternate pkg-config files.
107
108 Major changes between OpenSSL 0.9.7j and OpenSSL 0.9.7k:
109
110 o Fix Daniel Bleichenbacher forged signature attack, CVE-2006-4339
111
97 Major changes between OpenSSL 0.9.7i and OpenSSL 0.9.7j:
98
99 o Visual C++ 2005 fixes.
100 o Update Windows build system for FIPS.
101
102 Major changes between OpenSSL 0.9.7h and OpenSSL 0.9.7i:
103
104 o Give EVP_MAX_MD_SIZE it's old value, except for a FIPS build.
105
106 Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.7h:
107
112 Major changes between OpenSSL 0.9.7i and OpenSSL 0.9.7j:
113
114 o Visual C++ 2005 fixes.
115 o Update Windows build system for FIPS.
116
117 Major changes between OpenSSL 0.9.7h and OpenSSL 0.9.7i:
118
119 o Give EVP_MAX_MD_SIZE it's old value, except for a FIPS build.
120
121 Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.7h:
122
108 o Fix SSL 2.0 Rollback, CAN-2005-2969
123 o Fix SSL 2.0 Rollback, CVE-2005-2969
109 o Allow use of fixed-length exponent on DSA signing
110 o Default fixed-window RSA, DSA, DH private-key operations
111
112 Major changes between OpenSSL 0.9.7f and OpenSSL 0.9.7g:
113
114 o More compilation issues fixed.
115 o Adaptation to more modern Kerberos API.
116 o Enhanced or corrected configuration for Solaris64, Mingw and Cygwin.

--- 321 unchanged lines hidden ---
124 o Allow use of fixed-length exponent on DSA signing
125 o Default fixed-window RSA, DSA, DH private-key operations
126
127 Major changes between OpenSSL 0.9.7f and OpenSSL 0.9.7g:
128
129 o More compilation issues fixed.
130 o Adaptation to more modern Kerberos API.
131 o Enhanced or corrected configuration for Solaris64, Mingw and Cygwin.

--- 321 unchanged lines hidden ---