4 Late-Breaking News and Corrections

A bug in OpenSSL that could cause it to parse past the end of the message was found at the late stage of 8.2-RELEASE release process. The 8.2-RELEASE includes a fix for this issue by importing relevant parts from the OpenSSL CVS. This could be triggered by an incorrectly formatted ClientHello SSL/TLS handshake messages. The details can be found at http://www.openssl.org/news/secadv_20110208.txt.

This file, and other release-related documents, can be downloaded from ftp://ftp.FreeBSD.org/.

For questions about FreeBSD, read the documentation before contacting <questions@FreeBSD.org>.

For questions about this documentation, e-mail <doc@FreeBSD.org>.