{"id":99182,"date":"2021-02-17T22:22:46","date_gmt":"2021-02-17T20:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-openssl-1-1-1j-wolfssl-4-7-0-i-libressl-3-2-4"},"modified":"2021-02-17T22:22:46","modified_gmt":"2021-02-17T20:22:46","slug":"obnovlenie-openssl-1-1-1j-wolfssl-4-7-0-i-libressl-3-2-4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-openssl-1-1-1j-wolfssl-4-7-0-i-libressl-3-2-4","title":{"rendered":"P\u00ebrdit\u00ebsimi i OpenSSL 1.1.1j, wolfSSL 4.7.0 dhe LibreSSL 3.2.4","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb n\u00eb dispozicion nj\u00eb version i riparuar i bibliotek\u00ebs kriptografike OpenSSL 1.1.1j, n\u00eb t\u00eb cilin jan\u00eb rregulluar dy vulnerabilitete: <\/p>\n
\n
CVE-2021-23841 \u2014 dereference of a null pointer in the X509_issuer_and_serial_hash() function, which can lead to crashes in applications calling this function to process X509 certificates with invalid values in the issuer field.\n
CVE-2021-23840 \u2014 integer overflow in the EVP_CipherUpdate, EVP_EncryptUpdate, and EVP_DecryptUpdate functions, resulting in the return of value 1, indicating successful completion of the operation, while setting a negative value as size, which can lead to application crashes or abnormal behavior.\n
CVE-2021-23839 \u2014 a shortcoming in the rollback protection implementation on the use of the SSLv2 protocol. This issue manifests only in the old 1.0.2 branch. <\/ul>\n
Gjithashtu \u00ebsht\u00eb publikuar nj\u00eb version i paket\u00ebs LibreSSL 3.2.4, n\u00eb kuad\u00ebr t\u00eb t\u00eb cilit projekti OpenBSD zhvillon nj\u00eb fork t\u00eb OpenSSL, q\u00eb ka n\u00eb fokus sigurimin e nj\u00eb niveli m\u00eb t\u00eb lart\u00eb t\u00eb siguris\u00eb. Ky l\u00ebshim shquhet p\u00ebr rikthimin n\u00eb p\u00ebrdorimin e kodit t\u00eb vjet\u00ebr p\u00ebr verifikimin e certifikatave, i p\u00ebrdorur n\u00eb LibreSSL 3.1.x, p\u00ebr shkak t\u00eb pengesave n\u00eb funksionimin normal t\u00eb disa aplikacioneve me lidhje p\u00ebr t\u00eb anashkaluar gabimet n\u00eb kodin e vjet\u00ebr. Nga risit\u00eb, p\u00ebrmendet shtimi i realizimeve t\u00eb komponent\u00ebve exporter dhe autochain n\u00eb TLSv1.3. <\/p>\n
P\u00ebr m\u00eb tep\u00ebr, u publikua nj\u00eb version i ri i bibliotek\u00ebs kompakte kriptografike wolfSSL 4.7.0, e optimizuar p\u00ebr p\u00ebrdorim n\u00eb pajisje t\u00eb integruara me burime t\u00eb kufizuara procesori dhe memorjeje, si\u00e7 jan\u00eb pajisjet e internetit t\u00eb gj\u00ebrave, sistemet e sht\u00ebpive inteligjente, sistemet informacioni t\u00eb automjeteve, routerat dhe telefonat mobil\u00eb. Kodi \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv2. <\/p>\n
The new version implements support for RFC 5705 (Keying Material Exporters for TLS) and S\/MIME (Secure\/Multipurpose Internet Mail Extensions). A flag \u2018\u2014enable-reproducible-build\u2019 has been added to ensure repeatable builds. API SSL_get_verify_mode, X509_VERIFY_PARAM API, and X509_STORE_CTX were added to the compatibility layer for OpenSSL. The macro WOLFSSL_PSK_IDENTITY_ALERT has been implemented. A new function _CTX_NoTicketTLSv12 has been added to disable session tickets for TLS 1.2 while preserving them for TLS 1.3. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"