Home | History | Annotate | Download | only in recipes
History log of /src/crypto/external/bsd/openssl/dist/test/recipes/70-test_npn.t
RevisionDateAuthorComments
 1.1  08-Sep-2024  christos branches: 1.1.1;
Initial revision
 1.1.1.1  08-Sep-2024  christos branches: 1.1.1.1.4;
import 3.0.15 (previous was 3.0.14)

### Changes between 3.0.14 and 3.0.15 [3 Sep 2024]

* Fixed possible denial of service in X.509 name checks.

Applications performing certificate name checks (e.g., TLS clients checking
server certificates) may attempt to read an invalid memory address when
comparing the expected name with an `otherName` subject alternative name of
an X.509 certificate. This may result in an exception that terminates the
application program.

([CVE-2024-6119])

*Viktor Dukhovni*

* Fixed possible buffer overread in SSL_select_next_proto().

Calling the OpenSSL API function SSL_select_next_proto with an empty
supported client protocols buffer may cause a crash or memory contents
to be sent to the peer.

([CVE-2024-5535])

*Matt Caswell*
 1.1.1.1.4.2  02-Aug-2025  perseant Sync with HEAD
 1.1.1.1.4.1  08-Sep-2024  perseant file 70-test_npn.t was added on branch perseant-exfatfs on 2025-08-02 05:19:13 +0000

RSS XML Feed