[ubuntu/focal-security] openssl 1.1.1f-1ubuntu2.20 (Accepted)

Ian Constantin ian.constantin at canonical.com
Wed Oct 25 08:54:35 UTC 2023


openssl (1.1.1f-1ubuntu2.20) focal-security; urgency=medium

  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2023-3446.patch: adds check to prevent the testing of
      an excessively large modulus in DH_check().
    - CVE-2023-3446
  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2023-3817.patch: adds check to prevent the testing of
      invalid q values in DH_check().
    - CVE-2023-3817

Date: 2023-10-10 10:04:18.573554+00:00
Changed-By: Ian Constantin <ian.constantin at canonical.com>
https://launchpad.net/ubuntu/+source/openssl/1.1.1f-1ubuntu2.20
-------------- next part --------------
Sorry, changesfile not available.


More information about the Focal-changes mailing list