=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata58.html,v retrieving revision 1.7 retrieving revision 1.8 diff -c -r1.7 -r1.8 *** www/errata58.html 2015/10/14 18:59:37 1.7 --- www/errata58.html 2015/10/16 00:35:41 1.8 *************** *** 150,155 **** --- 150,164 ---- A replacement file is available in the 5.8 release directory with the name cd-src.tar.gz; due to size of the file, check local mirrors also.

+

  • + 007: RELIABILITY FIX: October 15, 2015 +   All architectures
    + The OBJ_obj2txt function in libcrypto contains a one byte buffer overrun + and memory leak, as reported by Qualys Security.
    + + A source code patch exists which remedies this problem. +

    +