Skip to content
This repository was archived by the owner on Aug 29, 2024. It is now read-only.

Commit 2082bd8

Browse files
committed
Update the FIPS CVE page after the new patch releases
Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Anton Arapov <anton@openssl.org> (Merged from #486)
1 parent 0b3be3b commit 2082bd8

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

news/fips-cve.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,8 +11,11 @@ relevance to it:
1111

1212
**CVE ID** | **Fixed** | **FIPS?** | **Notes**
1313
----- | --: | :-: | :---------------
14+
[CVE-2024-4741] | 3.0.14<br>3.1.6<br>3.2.2<br>3.3.1 | no |
15+
[CVE-2024-4603] | 3.0.14<br>3.1.6<br>3.2.2<br>3.3.1 | **yes** | EVP_PKEY_public_check() can take a long time. **Workaround:** First check the value returned by EVP_PKEY_get_bits() and reject too large keys.
16+
[CVE-2024-2511] | 3.0.14<br>3.1.6<br>3.2.2 | no |
1417
[CVE-2024-0727] | 3.0.13<br>3.1.5<br>3.2.1 | no |
15-
[CVE-2023-6237] | 3.0.13<br>3.1.5<br>3.2.1 | **yes** | EVP_PKEY_public_check() can take a long time
18+
[CVE-2023-6237] | 3.0.13<br>3.1.5<br>3.2.1 | **yes** | EVP_PKEY_public_check() can take a long time. **Workaround:** First check the value returned by EVP_PKEY_get_bits() and reject too large keys.
1619
[CVE-2023-6129] | 3.0.13<br>3.1.5<br>3.2.1 | no |
1720
[CVE-2023-5678] | 3.0.13<br>3.1.5 | no |
1821
[CVE-2023-5363] | 3.0.12<br>3.1.4 | no |
@@ -51,6 +54,9 @@ relevance to it:
5154
[CVE-2021-4044] | 3.0.1 | no |
5255
| | | | **Release of 3.0.0 FIPS provider**
5356

57+
[CVE-2024-4714]: /news/vulnerabilities.html#CVE-2024-4741
58+
[CVE-2024-4603]: /news/vulnerabilities.html#CVE-2024-4603
59+
[CVE-2024-2511]: /news/vulnerabilities.html#CVE-2024-2511
5460
[CVE-2024-0727]: /news/vulnerabilities.html#CVE-2024-0727
5561
[CVE-2023-6237]: /news/vulnerabilities.html#CVE-2023-6237
5662
[CVE-2023-6129]: /news/vulnerabilities.html#CVE-2023-6129

0 commit comments

Comments
 (0)