- Replaced function that fixes man-in-the-middle attack
- Added message to indicate inclusion of man-in-the-middle attack (Reported by Larry Highsmith, Subreption LLC)
- Released version 0.99-pre3
diff --git a/ChangeLog b/ChangeLog
index 7182b9e..5b8193e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,7 @@
PolarSSL ChangeLog
-= Version 0.99-pre2 released on 2011-02-25
+= Version 0.99-pre3 released on 2011-02-28
+This release replaces version 0.99-pre2 which had possible copyright issues.
Features
* Parsing PEM private keys encrypted with DES and AES
are now supported as well (Fixes ticket #5)
@@ -24,6 +25,11 @@
to negotiate anonymous connection (Fixes ticket #12,
found by Boris Krasnovskiy)
+Security fixes
+ * Fixed a possible Man-in-the-Middle attack on the
+ Diffie Hellman key exchange (thanks to Larry Highsmith,
+ Subreption LLC)
+
= Version 0.99-pre1 released on 2011-01-30
Features
Note: Most of these features have been donated by Fox-IT