=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v retrieving revision 1.410 retrieving revision 1.411 diff -c -r1.410 -r1.411 *** www/security.html 2014/04/12 17:39:57 1.410 --- www/security.html 2014/05/01 15:03:35 1.411 *************** *** 241,246 **** --- 241,249 ----
  • April 12, 2014: A use-after-free race condition in OpenSSL's read buffer may permit an attacker to inject data from one connection into another. +
  • May 1, 2014: + An attacker can trigger generation of an SSL alert which could + cause a null pointer dereference.
  • *************** *** 267,272 **** --- 270,278 ----
  • April 12, 2014: A use-after-free race condition in OpenSSL's read buffer may permit an attacker to inject data from one connection into another. +
  • May 1, 2014: + An attacker can trigger generation of an SSL alert which could + cause a null pointer dereference.