A fost lansat\u0103 o versiune corectiv\u0103 a bibliotecii criptografice OpenSSL 1.1.1j, care remediaz\u0103 dou\u0103 vulnerabilit\u0103\u021bi: <\/p>\n
\n
CVE-2021-23841 \u2014 de-referencing a null pointer in the function X509_issuer_and_serial_hash(), which may cause application crashes when this function is called to process X509 certificates with an incorrect issuer field value.\n
CVE-2021-23840 \u2014 integer overflow in the functions EVP_CipherUpdate, EVP_EncryptUpdate, and EVP_DecryptUpdate, which may result in returning a value of 1, indicating successful operation, and setting a negative value for size, potentially leading to application crashes or abnormal behavior.\n
CVE-2021-23839 \u2014 a shortcoming in the implementation of rollback protection to use the SSLv2 protocol. It manifests only in the old 1.0.2 branch. <\/ul>\n
De asemenea, a fost publicat un release al pachetului LibreSSL 3.2.4, \u00een cadrul c\u0103ruia proiectul OpenBSD dezvolt\u0103 un fork al OpenSSL, destinat asigur\u0103rii unui nivel de securitate mai ridicat. Lansarea este notabil\u0103 pentru revenirea la utilizarea vechiului cod de verificare a certificatelor, utilizat \u00een LibreSSL 3.1.x, din cauza problemelor de func\u021bionare normal\u0103 ale unor aplica\u021bii cu leg\u0103turi pentru evitarea erorilor \u00een vechiul cod. Dintre nout\u0103\u021bi se remarc\u0103 ad\u0103ugarea \u00een TLSv1.3 a implement\u0103rilor componentelor exporter \u0219i autochain. <\/p>\n
\u00cen plus, a fost lansat un nou release al bibliotecii criptografice compacte wolfSSL 4.7.0, optimizat\u0103 pentru utilizarea pe dispozitive incorporate cu resurse de procesor \u0219i memorie limitate, cum ar fi dispozitivele Internet of Things, sistemele smart home, sistemele de infotainment auto, routerele \u0219i telefoanele mobile. Codul este scris \u00een limbajul C \u0219i este distribuit sub licen\u021ba GPLv2. <\/p>\n
The new version implements support for RFC 5705 (Keying Material Exporters for TLS) and S\/MIME (Secure\/Multipurpose Internet Mail Extensions). A flag \u2018\u2014enable-reproducible-build\u2019 has been added to ensure reproducible builds. The SSL_get_verify_mode API, X509_VERIFY_PARAM API, and X509_STORE_CTX were added for compatibility with OpenSSL. The WOLFSSL_PSK_IDENTITY_ALERT macro has been implemented. A new function _CTX_NoTicketTLSv12 has been added to disable session tickets for TLS 1.2 while preserving them for TLS 1.3. \n Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"