# changelog

author: Veerendra C <veerendra.chandrappa@skyhighsecurity.com> 1.0.2zh-1
changelog:
  - OBJ_obj2txt() would translate any size OBJECT IDENTIFIER to canonical
       numeric text form.  For gigantic sub-identifiers, this would take a very
       long time, the time complexity being O(n^2) where n is the size of that
       sub-identifier.  (CVE-2023-2650)
  - Reworked the Fix for the Timing Oracle in RSA Decryption (CVE-2022-4304).
  - Corrected documentation of X509_VERIFY_PARAM_add0_policy() to mention
       that it does not enable policy checking. Thanks to
       David Benjamin for discovering this issue. (CVE-2023-0466)
  - Limited the number of nodes created in a policy tree to mitigate
       against CVE-2023-0464.  The default limit is set to 1000 nodes, which
       should be sufficient for most installations.  If required, the limit
       can be adjusted by setting the OPENSSL_POLICY_TREE_NODES_MAX build
       time define to a desired maximum number of nodes or zero to allow
       unlimited growth. (CVE-2023-0464)


author: Veerendra C <veerendra.chandrappa@skyhighsecurity.com> 1.0.2zi-1
changelog:
  - Fix excessive time spent checking DH q parameter value. -     (CVE-2023-3817)
  - Fix DH_check() excessive time with over sized modulus.  -     (CVE-2023-3446)


