Skip to content

1.21.3_openssl-3.3.2

Latest
Compare
Choose a tag to compare
@nil4 nil4 released this 04 Sep 07:02

Upgrade to OpenSSL 3.3.2

https://openssl-library.org/news/openssl-3.3-notes/#major-changes-between-openssl-331-and-openssl-332-3-sep-2024

OpenSSL 3.3.2 is a security patch release. The most severe CVE fixed in this release is Moderate.

This release incorporates the following bug fixes and mitigations:

  • Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])
  • Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])