ื ืงืขืจืขืงืืืื ืืขืืืื ื ืคืื ืื OpenSSL ืงืจืืคึผืืึธืืจืึทืคืืง ืืืืืืึธืืขืง 1.1.1l ืืื ืืืจืขืืืืื ืืื ืื ืืืืืึทื ืืืฉืึทื ืคืื ืฆืืืื ืืืึทืื ืขืจืึทืืืืืืื:
- CVE-2021-3711 ืืื ืึท ืืึทืคืขืจ ืึธืืืืขืจืคืืึธื ืืื ืื ืงืึธื ืืืคึผืืึทืืขื ืื ื ืื SM2 ืงืจืืคึผืืึธืืจืึทืคืืง ืึทืืืขืจืืืึทื (ืคึผืจืึธืกื ืืื ืืฉืืื ืึท), ืืืึธืก ืึทืืึทืื ืึทืจืืืฃ ืฆื 62 ืืืืขืก ืฆื ืืืื ืึธืืืืขืจืจืืืึทื ืืื ืึท ืืขืื ื ืืืืึทืืขืจ ืคืื ืื ืืึทืคืขืจ ืืจืขื ืขืฅ ืจืขืื ืฆื ืึท ืืขืืช ืืื ืงืึทืืงืืึทืืืืืื ื ืื ืืึทืคืขืจ ืืจืืืก. ืึท ืึทืืึทืงืขืจ ืงืขื ืคึผืึทืืขื ืืฉืึทืื ืืขืจืืจืืืื ืงืึธื ืืืจืืคืืจืื ื ืึธืืขืจ ืึทืคึผืืึทืงืืืฉืึทื ืงืจืึทื ืืืจื ืคืึธืจื ืกืคึผืขืฆืืขื ืงืจืึทืคืืขื ืืืงืึธืืืื ื ืืึทืื ืฆื ืึทืคึผืืึทืงืืืฉืึทื ื ืืืึธืก ื ืืฆื ืื EVP_PKEY_decrypt () ืคึฟืื ืงืฆืืข ืฆื ืืขืงืจืืคึผื SM2 ืืึทืื.
- CVE-2021-3712 ืืื ืึท ืืึทืคืขืจ ืึธืืืืขืจืคืืึธื ืืื ืื ASN.1 ืฉืืจืืงื ืคึผืจืึทืกืขืกืื ื ืงืึธื, ืืืึธืก ืงืขื ืขื ืึธื ืืึทืื ืึท ืึทืคึผืืึทืงืืืฉืึทื ืงืจืึทื ืึธืืขืจ ืึทื ืืืขืงื ืืขื ืืื ืืึทืื ืคืื ืคึผืจืึธืฆืขืก ืืึผืจืื (ืืืฉื, ืฆื ืืืขื ืืืคืืฆืืจื ืฉืืืกืืขื ืกืืึธืจื ืืื ืืึผืจืื) ืืืื ืื ืึทืืึทืงืขืจ ืืื ืขืคืขืก ืงืขื ืขื ืฆื ืืืฉืขื ืขืจืืื. ืึท ืฉืืจืืงื ืืื ืื ืื ืขืจืืขื ASN1_STRING ืกืืจืืงืืืจ. ื ืื ืืขืจืืึทื ืืืืื ืืืจื ืึท ื ืึทื ืืึทืจืึทืงืืขืจ, ืืื ืคึผืจืึธืฆืขืก ืขืก ืืื OpenSSL ืคืึทื ืืงืฉืึทื ื ืืืึธืก ืืจืืงื ืกืขืจืืืคืืงืึทืฅ, ืึทืืึท ืืื X509_aux_print(), X509_get1_email(), X509_REQ_get1_email() ืืื X509_get1_ocsp().
ืืื ืืขืจ ืืขืืืืงืขืจ ืฆืืื, ื ืืึทืข ืืืขืจืกืืขืก ืคืื ืื LibreSSL ืืืืืืึธืืขืง 3.3.4 ืืื 3.2.6 ืืขื ืขื ืืืคืจืืื, ืืืึธืก ืืึธื ื ืื ืืคืืจืืฉ ืืขืจืืึธื ืขื ืืืึทืื ืขืจืึทืืืืืืื, ืึธืืขืจ ืืืื ืืฉืคืื ืืืื ืืขืจ ืจืฉืืื ืคืื ืขื ืืขืจืื ืืขื, ืื CVE-2021-3712 ืืืึทืื ืขืจืึทืืืืืื ืืื ืืืืืึทื ืืืืึทื.
ืืงืืจ: opennet.ru