CHANGES: Updated CHANGES document for 0.9.6

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

diff --git a/CHANGES b/CHANGES
index 7ba213034b894cb6d7c946c20f06c0366bf73c94..4f24c4e3dac53d4215419ede94f4b75228508e1e 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,8 @@
 CHANGES - changes for libtpms
 
+version 0.9.6:
+  - tpm2: Check size of buffer before accessing it (CVE-2023-1017 & -1018)
+
 version 0.9.5:
   - tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
   - tpm2: Fix a potential overflow expression (coverity)