tocsin

Alpine/openssl: medium 5.9

Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that woul

Action: Upgrade openssl to 1.0.2o-r0 or later.

Affected

introducedfixedlast affected
1.1.0--

Fixed versions

1.0.2o-r0

Sources

published · modified · JSON