=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata56.html,v retrieving revision 1.31 retrieving revision 1.32 diff -u -r1.31 -r1.32 --- www/errata56.html 2015/06/11 18:10:53 1.31 +++ www/errata56.html 2015/06/11 22:45:21 1.32 @@ -383,6 +383,11 @@
  • CVE-2015-1789 - Exploitable out-of-bounds read in X509_cmp_time
  • CVE-2015-1792 - CMS verify infinite loop with unknown hash function +Note that CMS was already disabled in LibreSSL. +Several other issues did not apply or were already fixed and one is under review.
    +For more information, see the +OpenSSL advisory. +
    A source code patch exists which remedies this problem.