Commit Graph

6 Commits

Author SHA1 Message Date
Maurizio Barbaro
69b026356f Backport openssl: SSL_select_next_proto buffer overread from 3.2
Fix CVE-2024-5535

Resolves: RHEL-45653

Signed-off-by: Maurizio Barbaro <mbarbaro@redhat.com>
2024-09-16 14:06:09 +02:00
Dmitry Belyavskiy
09a086d240 Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
Resolves: RHEL-17696
2023-11-30 12:20:43 +01:00
Clemens Lang
c7561b3a10 Fix CVE-2023-5678
Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
excessively long X9.42 DH keys or parameters may be very slow

Resolves: RHEL-16538
Signed-off-by: Clemens Lang <cllang@redhat.com>
2023-11-15 17:37:26 +01:00
Clemens Lang
dba9cab3de Fix CVE-2023-3446, CVE-2023-3817
- Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
- Fix CVE-2023-3817: Excessive time spent checking DH q parameter value

Resolves: RHEL-14245
Resolves: RHEL-14239
Signed-off-by: Clemens Lang <cllang@redhat.com>
2023-10-23 17:21:57 +02:00
CentOS Sources
6dc7264ac5 Auto sync2gitlab import of openssl-1.1.1k-9.el8.src.rpm 2023-02-18 00:25:20 +00:00
CentOS Sources
6864f5f043 Auto sync2gitlab import of openssl-1.1.1k-7.el8_6.src.rpm 2022-07-11 12:11:47 +00:00