CVS log for src/crypto/external/bsd/openssl/dist/test/recipes/25-test_eai_data/kdc-root-cert.pem

Up to [cvs.NetBSD.org] / src / crypto / external / bsd / openssl / dist / test / recipes / 25-test_eai_data

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: OPENSSL, MAIN

import 3.0.15 (previous was 3.0.14)

### Changes between 3.0.14 and 3.0.15 [3 Sep 2024]

 * Fixed possible denial of service in X.509 name checks.

   Applications performing certificate name checks (e.g., TLS clients checking
   server certificates) may attempt to read an invalid memory address when
   comparing the expected name with an `otherName` subject alternative name of
   an X.509 certificate. This may result in an exception that terminates the
   application program.

   ([CVE-2024-6119])

   *Viktor Dukhovni*

 * Fixed possible buffer overread in SSL_select_next_proto().

   Calling the OpenSSL API function SSL_select_next_proto with an empty
   supported client protocols buffer may cause a crash or memory contents
   to be sent to the peer.

   ([CVE-2024-5535])

   *Matt Caswell*

Initial revision