diff options
| author | Tomas Mraz <tomas@openssl.org> | 2023-07-25 15:35:34 +0200 |
|---|---|---|
| committer | Todd Short <todd.short@me.com> | 2023-07-27 09:57:58 -0400 |
| commit | f777f9ff6750929a219c4ec63fa865909abb840b (patch) | |
| tree | 17c109a60541a8b10940b5d1920624a7e58f9a22 /NEWS.md | |
| parent | 2255f6c74e6c8b702adcf352b04c5d3e6c759745 (diff) | |
Add CHANGES.md and NEWS.md entries for CVE-2023-3817
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Todd Short <todd.short@me.com>
(Merged from https://github.com/openssl/openssl/pull/21550)
(cherry picked from commit 4b29762802c05fa871f0e1efcf804e86db0ddaa2)
(cherry picked from commit fb54f415b9981adebb03997304ac77d4d0cc520a)
Diffstat (limited to 'NEWS.md')
| -rw-r--r-- | NEWS.md | 2 |
1 files changed, 2 insertions, 0 deletions
@@ -20,6 +20,7 @@ OpenSSL 3.0 ### Major changes between OpenSSL 3.0.9 and OpenSSL 3.0.10 [under development] + * Fix excessive time spent checking DH q parameter value ([CVE-2023-3817]) * Fix DH_check() excessive time with over sized modulus ([CVE-2023-3446]) * Do not ignore empty associated data entries with AES-SIV ([CVE-2023-2975]) @@ -1447,6 +1448,7 @@ OpenSSL 0.9.x <!-- Links --> +[CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817 [CVE-2023-3446]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3446 [CVE-2023-2975]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-2975 [CVE-2023-2650]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-2650 |