Browse Source
This update solves eight security issues namingly: 1. DTLS segmentation fault in dtls1_get_record (CVE-2014-3571) 2. DTLS memory leak in dtls1_buffer_record (CVE-2015-0206) 3. no-ssl3 configuration sets method to NULL (CVE-2014-3569) 4. ECDHE silently downgrades to ECDH [Client] (CVE-2014-3572) 5. RSA silently downgrades to EXPORT_RSA [Client] (CVE-2015-0204) 6. DH client certificates accepted without verification [Server] (CVE-2015-0205) 7. Certificate fingerprints can be modified (CVE-2014-8275) 8. Bignum squaring may produce incorrect results (CVE-2014-3570) URL for this Security Advisory: https://www.openssl.org/news/secadv_20150108.txtmaster
Nagy Karoly Gabriel
10 years ago
1 changed files with 3 additions and 3 deletions
Loading…
Reference in new issue