From 0c874676af166ea216d9fb7e9bc9dfc76c28e642 Mon Sep 17 00:00:00 2001 From: Rainer Gerhards Date: Mon, 7 Aug 2023 12:08:13 +0200 Subject: [PATCH] maintain ChangeLog --- ChangeLog | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/ChangeLog b/ChangeLog index a15719fa9b..49820c5258 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,14 @@ ---------------------------------------------------------------------------------------- Scheduled Release 8.2308.0 (aka 2023.08) 2023-08-?? +- 2023-08-07: crypto subsystem bugfix: potential undefined behaviour + The is some potential undefined behaviour when initializting the IV for locally + encrypting log files. The issue cancels itself out, but at least causes + some confusion when using undefined behaviour sanitizer (UBSAN). However, + UBSAN seems not to detect the issue on all platforms and/or in all versions + (we were not able to reproduce this issue in our CI). + Please also note that the functionality where this can happen is extremely + rarely being used. + Thanks to Jeffrey Walton for providing the patch. - 2023-08-02: lookup tables: fix static analyzer issue If something goes really wrong, a lookup table's name would not be set. That could lead to a NULL pointer access. HOWEVER, this