[openssl] OpenSSL_1_1_1-stable update

[Matt Caswell]

The branch OpenSSL_1_1_1-stable has been updated
       via  48a09ebc273f98380a7578c4243adc0e14f8f2db (commit)
       via  5a77b55cdc142acad28b8e78db0d8990c0f48724 (commit)
      from  19599138463e910a9ee4cfa122e941752491ffc3 (commit)


- Log -----------------------------------------------------------------
commit 48a09ebc273f98380a7578c4243adc0e14f8f2db
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Mar 17 11:24:20 2020 +0000

    Update CHANGES for the new release
    
    Reviewed-by: Mark J. Cox <mark at awe.com>
    (Merged from https://github.com/openssl/openssl/pull/11342)

commit 5a77b55cdc142acad28b8e78db0d8990c0f48724
Author: Matt Caswell <matt at openssl.org>
Date:   Tue Mar 17 10:11:28 2020 +0000

    Update NEWS for the new release
    
    Reviewed-by: Mark J. Cox <mark at awe.com>
    (Merged from https://github.com/openssl/openssl/pull/11342)

-----------------------------------------------------------------------

Summary of changes:
 CHANGES | 19 +++++++++++++++++++
 NEWS    |  3 ++-
 2 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index 8c29dfae55..005ea56d40 100644
--- a/CHANGES
+++ b/CHANGES
@@ -8,6 +8,25 @@
  release branch.
 
  Changes between 1.1.1d and 1.1.1e [xx XXX xxxx]
+  *) Properly detect EOF while reading in libssl. Previously if we hit an EOF
+     while reading in libssl then we would report an error back to the
+     application (SSL_ERROR_SYSCALL) but errno would be 0. We now add
+     an error to the stack (which means we instead return SSL_ERROR_SSL) and
+     therefore give a hint as to what went wrong.
+     [Matt Caswell]
+
+  *) Check that ed25519 and ed448 are allowed by the security level. Previously
+     signature algorithms not using an MD were not being checked that they were
+     allowed by the security level.
+     [Kurt Roeckx]
+
+  *) Fixed SSL_get_servername() behaviour. The behaviour of SSL_get_servername()
+     was not quite right. The behaviour was not consistent between resumption
+     and normal handshakes, and also not quite consistent with historical
+     behaviour. The behaviour in various scenarios has been clarified and
+     it has been updated to make it match historical behaviour as closely as
+     possible.
+     [Matt Caswell]
 
   *) [VMS only] The header files that the VMS compilers include automatically,
      __DECC_INCLUDE_PROLOGUE.H and __DECC_INCLUDE_EPILOGUE.H, use pragmas that
diff --git a/NEWS b/NEWS
index 4af390505d..2d2cf66c60 100644
--- a/NEWS
+++ b/NEWS
@@ -7,7 +7,8 @@
 
   Major changes between OpenSSL 1.1.1d and OpenSSL 1.1.1e [under development]
 
-      o
+      o Fixed an overflow bug in the x64_64 Montgomery squaring procedure
+        used in exponentiation with 512-bit moduli (CVE-2019-1551)
 
   Major changes between OpenSSL 1.1.1c and OpenSSL 1.1.1d [10 Sep 2019]