From 005d1ca04ca3e3957dc14d08d2bf64c1b244e0af Mon Sep 17 00:00:00 2001
From: Stefan Berger <stefanb@linux.ibm.com>
Date: Wed, 22 Feb 2023 09:06:31 -0500
Subject: [PATCH] CHANGES: Updated CHANGES document for 0.8.9

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
---
 CHANGES | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGES b/CHANGES
index b3b4ed9e..4880f838 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,8 @@
 CHANGES - changes for libtpms
 
+version 0.8.9:
+ - tpm2: Check size of buffer before accessing it (CVE-2023-1017 & -1018)
+
 version 0.8.8:
  - tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore
  - tpm2: Fix a potential overflow expression (coverity)