Update OpenSSL 1.1.1j, wolfSSL 4.7.0, and LibreSSL 3.2.4
A corrective release of the OpenSSL cryptographic library 1.1.1j is now available, addressing two vulnerabilities: CVE-2021-23841 — a null pointer dereference in the X509_issuer_and_serial_hash() function, which can lead to the crash of applications invoking this function for processing X509 certificates with an incorrect value in the issuer field. CVE-2021-23840 — an integer overflow in the EVP_CipherUpdate, EVP_EncryptUpdate, and EVP_DecryptUpdate functions, which may result in the return value […]
