=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v retrieving revision 1.410 retrieving revision 1.411 diff -u -r1.410 -r1.411 --- www/security.html 2014/04/12 17:39:57 1.410 +++ www/security.html 2014/05/01 15:03:35 1.411 @@ -241,6 +241,9 @@
  • April 12, 2014: A use-after-free race condition in OpenSSL's read buffer may permit an attacker to inject data from one connection into another. +
  • May 1, 2014: + An attacker can trigger generation of an SSL alert which could + cause a null pointer dereference.
  • @@ -267,6 +270,9 @@
  • April 12, 2014: A use-after-free race condition in OpenSSL's read buffer may permit an attacker to inject data from one connection into another. +
  • May 1, 2014: + An attacker can trigger generation of an SSL alert which could + cause a null pointer dereference.