commit 018063477b93620e49e232eb3846eebe351f7393
author Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Fri Oct 30 09:35:03 2015 +0100
committer Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Mon Nov 02 06:10:24 2015 +0900
tree 380522c60540e06d28e18b0a2d60add943f63aaf
parent 7a4d9a5b920b1e27ccc440451c6f0e573bc4ee2c

Add Changelog entries for this branch

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index add1831..e967075 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,7 +2,15 @@
 
 = Version 1.2.18 released 2015-10-xx
 
+Security
+   * The X509 max_pathlen constraint was not enforced on intermediate
+     certificates. Found by Nicholas Wilson, fix and tests provided by
+     Janos Follath. #280 and #319
+
 Bugfix
+   * Self-signed certificates were not excluded from pathlen counting,
+     resulting in some valid X.509 being incorrectly rejected. Found and fix
+     provided by Janos Follath. #319
    * Fix failures in MPI on Sparc(64) due to use of bad assembly code.
      Found by Kurt Danielson. #292