Megjelent az OpenSSL 1.1.1j titkos\u00edt\u00f3 k\u00f6nyvt\u00e1r helyre\u00e1ll\u00edt\u00f3 kiad\u00e1sa, amelyben k\u00e9t sebezhet\u0151s\u00e9get jav\u00edtottak: <\/p>\n
\n
CVE-2021-23841 \u2014 null pointer dereference in the function X509_issuer_and_serial_hash(), which can lead to crashes in applications calling this function to process X509 certificates with incorrect values in the issuer field.\n
CVE-2021-23840 \u2014 integer overflow in the functions EVP_CipherUpdate, EVP_EncryptUpdate, and EVP_DecryptUpdate, resulting in a return value of 1 indicating successful operation and setting a negative size value, which can lead to application crashes or abnormal behavior.\n
CVE-2021-23839 \u2014 a flaw in the implementation of rollback protection for SSLv2 protocol. This issue manifests only in the older branch 1.0.2. <\/ul>\n
Megjelent a LibreSSL 3.2.4 csomag \u00faj kiad\u00e1sa, amelyben az OpenBSD projekt fejleszti az OpenSSL forkot a magasabb szint\u0171 biztons\u00e1g biztos\u00edt\u00e1sa \u00e9rdek\u00e9ben. A kiad\u00e1s k\u00fcl\u00f6n\u00f6sen figyelemrem\u00e9lt\u00f3 azzal, hogy visszat\u00e9rtek a LibreSSL 3.1.x verzi\u00f3ban haszn\u00e1lt tan\u00fas\u00edtv\u00e1ny-ellen\u0151rz\u00e9si r\u00e9gi k\u00f3dhoz, mivel egyes alkalmaz\u00e1sok m\u0171k\u00f6d\u00e9s\u00e9t megszak\u00edtotta a r\u00e9gi k\u00f3d hib\u00e1inak megker\u00fcl\u00e9s\u00e9re haszn\u00e1lt k\u00f6t\u0151d\u00e9sek miatt. Az \u00fajdons\u00e1gok k\u00f6z\u00f6tt megemelend\u0151 a TLSv1.3 protokollhoz hozz\u00e1adott exporter \u00e9s autochain komponensek implement\u00e1l\u00e1sa. <\/p>\n
Ezen k\u00edv\u00fcl megjelent a wolfSSL 4.7.0 kompakt titkos\u00edt\u00f3 k\u00f6nyvt\u00e1r \u00faj kiad\u00e1sa, amelyet be\u00e1gyazott eszk\u00f6z\u00f6kben val\u00f3 haszn\u00e1latra optimaliz\u00e1ltak, mint p\u00e9ld\u00e1ul az IoT eszk\u00f6z\u00f6k, okos otthon rendszerek, aut\u00f3s informatikai rendszerek, \u00fatv\u00e1laszt\u00f3k \u00e9s mobiltelefonok. A k\u00f3d C nyelven k\u00e9sz\u00fclt \u00e9s GPLv2 licenc alatt terjesztik. <\/p>\n
The new version implements support for RFC 5705 (Keying Material Exporters for TLS) and S\/MIME (Secure\/Multipurpose Internet Mail Extensions). A flag `\u2014enable-reproducible-build` has been added to ensure reproducible builds. Additionally, the SSL layer for compatibility with OpenSSL has added APIs SSL_get_verify_mode, X509_VERIFY_PARAM API, and X509_STORE_CTX. The macro WOLFSSL_PSK_IDENTITY_ALERT has been implemented. A new function _CTX_NoTicketTLSv12 has been introduced to disable session tickets for TLS 1.2, while preserving them for TLS 1.3. \n Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"