commit ad0fe92fb6e63673ad90c8618f096ccf5ba7b6db
author Hanno Becker <hanno.becker@arm.com> Thu Aug 16 15:52:22 2018 +0100
committer Hanno Becker <hanno.becker@arm.com> Thu Aug 16 15:52:22 2018 +0100
tree 48c034c33ed7fa9bbfd62d6d6b24b35c9dc0b4d0
parent ad17fe9c377def269b4d96537f21427e4fddcdd2

Adapt ChangeLog

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index abd5e61..f505b38 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -10,6 +10,9 @@
    * Add ecc extensions only if an ecc based ciphersuite is used.
      This improves compliance to RFC 4492, and as a result, solves
      interoperability issues with BouncyCastle. Raised by milenamil in #1157.
+   * Fix overly strict bounds check in ssl_parse_certificate_request()
+     which could lead to valid CertificateRequest messages being rejected.
+     Fixes #1954.
 
 Changes
    * Copy headers preserving timestamps when doing a "make install".