diff options
-rw-r--r-- | CHANGES.md | 15 | ||||
-rw-r--r-- | NEWS.md | 4 |
2 files changed, 17 insertions, 2 deletions
diff --git a/CHANGES.md b/CHANGES.md index 408efa60ba..34cd2c5acc 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -477,7 +477,19 @@ OpenSSL 3.1 ### Changes between 3.1.4 and 3.1.5 [xx XXX xxxx] - * none yet + * Fix excessive time spent in DH check / generation with large Q parameter + value. + + Applications that use the functions DH_generate_key() to generate an + X9.42 DH key may experience long delays. Likewise, applications that use + DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() + to check an X9.42 DH key or X9.42 DH parameters may experience long delays. + Where the key or parameters that are being checked have been obtained from + an untrusted source this may lead to a Denial of Service. + + ([CVE-2023-5678]) + + *Richard Levitte* ### Changes between 3.1.3 and 3.1.4 [24 Oct 2023] @@ -20305,6 +20317,7 @@ ndif <!-- Links --> +[CVE-2023-5678]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5678 [CVE-2023-5363]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5363 [CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807 [CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817 @@ -54,7 +54,8 @@ OpenSSL 3.1 ### Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [under development] - * none + * Fix excessive time spent in DH check / generation with large Q parameter + value ([CVE-2023-5678]) ### Major changes between OpenSSL 3.1.3 and OpenSSL 3.1.4 [24 Oct 2023] @@ -1511,6 +1512,7 @@ OpenSSL 0.9.x <!-- Links --> +[CVE-2023-5678]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5678 [CVE-2023-5363]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5363 [CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807 [CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817 |