You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Aug 29, 2024. It is now read-only.
Copy file name to clipboardExpand all lines: news/fips-cve.md
+7-1Lines changed: 7 additions & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -11,8 +11,11 @@ relevance to it:
11
11
12
12
**CVE ID** | **Fixed** | **FIPS?** | **Notes**
13
13
----- | --: | :-: | :---------------
14
+
[CVE-2024-4741] | 3.0.14<br>3.1.6<br>3.2.2<br>3.3.1 | no |
15
+
[CVE-2024-4603] | 3.0.14<br>3.1.6<br>3.2.2<br>3.3.1 | **yes** | EVP_PKEY_public_check() can take a long time. **Workaround:** First check the value returned by EVP_PKEY_get_bits() and reject too large keys.
16
+
[CVE-2024-2511] | 3.0.14<br>3.1.6<br>3.2.2 | no |
14
17
[CVE-2024-0727] | 3.0.13<br>3.1.5<br>3.2.1 | no |
15
-
[CVE-2023-6237] | 3.0.13<br>3.1.5<br>3.2.1 | **yes** | EVP_PKEY_public_check() can take a long time
18
+
[CVE-2023-6237] | 3.0.13<br>3.1.5<br>3.2.1 | **yes** | EVP_PKEY_public_check() can take a long time. **Workaround:** First check the value returned by EVP_PKEY_get_bits() and reject too large keys.
0 commit comments