organicmaps/libexpat
13
Fork 0
mirror of https://github.com/libexpat/libexpat.git synced 2025-04-13 08:02:56 +00:00
Code Issues 1 Projects Releases Wiki Activity Actions

Changes: Mention use of high quality entropy sources

Browse source
This commit is contained in:
Sebastian Pipping 2017-05-25 19:28:15 +02:00
parent 04ad658bd3
commit ba1fc202c1
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
expat/Changes
View file

@ -2,6 +2,11 @@ Release ??????????
Security fixes:
CVE-2016-9063 -- Detect integer overflow
#25 More integer overflow detection (function poolGrow)
Use high quality entropy for hash initialization:
* arc4random_buf on BSD, systems with libbsd, CloudABI
* RtlGenRandom on Windows XP / Server 2003 and later
* getrandom on glic 2.25+ Linux 3.17+
In a way, that's still part of CVE-2016-5300.
Bug fixes:
#539 Fix regression from fix to CVE-2016-0718 cutting off