summaryrefslogtreecommitdiffstats
path: root/NEWS.md
diff options
context:
space:
mode:
authorTomas Mraz <tomas@openssl.org>2023-11-07 15:22:00 +0100
committerTomas Mraz <tomas@openssl.org>2023-11-08 17:36:29 +0100
commit200688f74a741c00a9fa2aceaacc74c176ee1e0b (patch)
tree1c3958d0e933ead2c8a4a81c5097c3713d269a62 /NEWS.md
parent78a584aed1ca3307c50d900365f92b411f26a3de (diff)
Add CHANGES.md and NEWS.md entry for CVE-2023-5678
Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22647) (cherry picked from commit 4ee71b4c302a06c24b46a5def1cff2096bd57f0b)
Diffstat (limited to 'NEWS.md')
-rw-r--r--NEWS.md4
1 files changed, 3 insertions, 1 deletions
diff --git a/NEWS.md b/NEWS.md
index 1d1bda963c..9162f3ce4e 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -20,7 +20,8 @@ OpenSSL 3.0
### Major changes between OpenSSL 3.0.12 and OpenSSL 3.0.13 [under development]
- * none
+ * Fix excessive time spent in DH check / generation with large Q parameter
+ value ([CVE-2023-5678])
### Major changes between OpenSSL 3.0.11 and OpenSSL 3.0.12 [24 Oct 2023]
@@ -1462,6 +1463,7 @@ OpenSSL 0.9.x
<!-- Links -->
+[CVE-2023-5678]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5678
[CVE-2023-5363]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5363
[CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807
[CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817