{"id":99182,"date":"2021-02-17T22:22:46","date_gmt":"2021-02-17T20:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-openssl-1-1-1j-wolfssl-4-7-0-i-libressl-3-2-4"},"modified":"2021-02-17T22:22:46","modified_gmt":"2021-02-17T20:22:46","slug":"obnovlenie-openssl-1-1-1j-wolfssl-4-7-0-i-libressl-3-2-4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/obnovlenie-openssl-1-1-1j-wolfssl-4-7-0-i-libressl-3-2-4","title":{"rendered":"OpenSSL 1.1.1j, wolfSSL 4.7.0 ja LibreSSL 3.2.4 uuendamine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Saadaval on OpenSSL 1.1.1j kr\u00fcptograafia teegi korrektsioonia v\u00e4ljalase, milles on likvideeritud kaks haavatavust: <\/p>\n
\n
CVE-2021-23841 \u2014 null pointer dereference in the X509_issuer_and_serial_hash() function, which may lead to application crashes when this function is invoked to process X509 certificates with an incorrect issuer field value.\n
CVE-2021-23840 \u2014 integer overflow in the EVP_CipherUpdate, EVP_EncryptUpdate, and EVP_DecryptUpdate functions, resulting in returning a value of 1, indicating successful operation, while setting a negative size that may cause application crashes or abnormal behavior.\n
CVE-2021-23839 \u2014 an oversight in the implementation of rollback protection against the use of the SSLv2 protocol. This only manifests in the old 1.0.2 branch. <\/ul>\n
Samuti on avaldatud LibreSSL 3.2.4 paketi versioon, mille raames arendab OpenBSD projekt OpenSSL'i haru, mille eesm\u00e4rk on pakkuda k\u00f5rgemat turvalisuse taset. Avaldamine on t\u00e4helepanuv\u00e4\u00e4rne, kuna vanade sertifikaatide kontrollimise koodi tagasip\u00f6\u00f6rdumine LibreSSL 3.1.x-st, sest see h\u00e4iris m\u00f5nede rakenduste normaalset toimimist, mis tuginesid vanade koodifragmentide vigade \u00fcmberh\u00fcpetele. Uuendustest tuleb esile tuua TLSv1.3 komponentide exporter ja autochain implementatsioonide lisamine. <\/p>\n
Lisaks ilmus uus wolfSSL 4.7.0 kompaktne kr\u00fcptograafia teek, mis on optimeeritud t\u00f6\u00f6tamiseks v\u00e4ikeettev\u00f5tete seadmetes, millel on piiratud protsessori ja m\u00e4lu ressursid, n\u00e4iteks asjade interneti seadmed, nutikodu s\u00fcsteemid, autoinformatsioonis\u00fcsteemid, ruuterid ja mobiiltelefonid. Kood on kirjutatud C keeles ja seda levitatakse GPLv2 litsentsi alusel. <\/p>\n
The new version implements support for RFC 5705 (Keying Material Exporters for TLS) and S\/MIME (Secure\/Multipurpose Internet Mail Extensions). A flag \u2018\u2014enable-reproducible-build\u2019 is added to ensure repeatable builds. Compatibility layer APIs SSL_get_verify_mode, X509_VERIFY_PARAM API, and X509_STORE_CTX have been added for OpenSSL compatibility. The WOLFSSL_PSK_IDENTITY_ALERT macro has been implemented. A new function _CTX_NoTicketTLSv12 has been added to disable TLS 1.2 session tickets while retaining them for TLS 1.3. \n Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"