CVE-2022-3786 and CVE-2022-3602: X.509 Email Address Buffer Overflows - OpenSSL Blog
Today we published an advisory about CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Buffer Overflow”). Please read the advisory for specific details about these CVEs and how they might impact you. This blog post will address some common questions that we expect to be asked about these CVEs. Q: The 3.0.7 release was announced as
[ OpenSSL 3.0 Series Release Notes ] - /news/openssl-3.0-notes.html
OpenSSL 3.0 Series Release Notes The major changes and known issues for the 3.0 branch of the OpenSSL toolkit are summarised below. The contents reflect the current state of the NEWS file inside the git repository. More details can be found in the ChangeLog. Major changes between OpenSSL 3.0.12 and OpenSSL 3.0.13 [30 Jan 2024] Fixed PKCS12 Decoding crashes ([CVE-2024-0727]) Fixed Excessive time sp
OpenSSL Security Advisory : CA certificate check bypass with X509_V_FLAG_X509_STRICT (CVE-2021-3450)
Using TLS1.3 With OpenSSL - OpenSSL Blog
Note: This is an outdated version of this blog post. This information is now maintained in a wiki page. See here for the latest version. The forthcoming OpenSSL 1.1.1 release will include support for TLSv1.3. The new release will be binary and API compatible with OpenSSL 1.1.0. In theory, if your application supports OpenSSL 1.1.0, then all you need to do to upgrade is to drop in the new version o
Licensing Update - OpenSSL Blog
Licensing Update Posted by Rich Salz , Mar 22 nd , 2017 12:00 pm The following is a press release that we just released, with the cooperation and financial support of the Core Infrastructure Initiative and the Linux Foundation. In the next few days we’ll start sending out email to all contributors asking them to approve the change. In the meantime, you can visit the licensing website and search fo
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
OpenSSL Security Advisory [8th April 2024]
https://www.openssl.org/news/secadv/20240109.txt
/news/openssl-3.2-notes.html
https://www.openssl.org/news/secadv/20230719.txt
https://www.openssl.org/news/secadv/20230207.txt
OpenSSL Security Advisory [09 September 2020]
OpenSSL Security Advisory [3rd May 2016]
OpenSSL Security Advisory [28th Jan 2016]
Alternative chains certificate forgery (CVE-2015-1793) | OpenSSL Security Advisory [9 Jul 2015]
OpenSSL SSL/TLS MITM vulnerability (CVE-2014-0224)