nixpkgs
dab206ff - openssl_3_1: 3.1.5 -> 3.1.6

Commit
1 year ago
openssl_3_1: 3.1.5 -> 3.1.6 Changelog: https://github.com/openssl/openssl/blob/openssl-3.1/CHANGES.md#changes-between-315-and-316-4-jun-2024 CVEs fixed: - Fixed potential use after free after SSL_free_buffers() is called. (CVE-2024-4741) - Fixed an issue where checking excessively long DSA keys or parameters may be very slow. (CVE-2024-4603) - Fixed an issue where some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions. An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service. (CVE-2024-2511) Signed-off-by: Markus Theil <theil.markus@gmail.com>
Author
Committer
Parents
Loading