1 files changed, 7 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index c7f73af16..8f24fc6bc 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -17,6 +17,13 @@
      the corresponding ssh_put_bignum functions create.  This fixes the
      use of 16384-bit RSA keys (bug reported by Eivind Evensen).
      ok djm@
+   - djm@cvs.openbsd.org 2014/06/24 00:52:02
+     [krl.c]
+     fix bug in KRL generation: multiple consecutive revoked certificate
+     serial number ranges could be serialised to an invalid format.
+     
+     Readers of a broken KRL caused by this bug will fail closed, so no
+     should-have-been-revoked key will be accepted.
 
 20140618
  - (tim) [openssh/session.c] Work around to get chroot sftp working on UnixWare