OpenSSL 1.1.1g yosindikizidwa ndi kukonza kusatetezeka kwa TLS 1.3

Ipezeka kumasulidwa kokonza laibulale ya cryptographic OpenSSL 1.1.1g, momwe imachotsedwa kusatetezeka (CVE-2020-1967), zomwe zimatsogolera ku kukana ntchito poyesa kukambirana ndi TLS 1.3 kugwirizana ndi seva yolamulidwa ndi wowukira kapena kasitomala. Chiwopsezocho chimawerengedwa ngati chovuta kwambiri.

Vutoli limangowonekera pamapulogalamu omwe amagwiritsa ntchito SSL_check_chain() ntchito ndikupangitsa kuti ntchitoyi iwonongeke ngati chowonjezera cha TLS "signature_algorithms_cert" chikugwiritsidwa ntchito molakwika. Makamaka, ngati njira yolankhulirana yolumikizira ilandila phindu losathandizidwa kapena lolakwika la algorithm yosinthira siginecha ya digito, NULL pointer dereference imachitika ndipo njirayo imawonongeka. Vutoli likuwoneka kuyambira kutulutsidwa kwa OpenSSL 1.1.1d.

Source: opennet.ru