tocsin

Alpine/openssl3: low 3.7

In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recove

Action: Upgrade openssl3 to 1.1.1d-r1 or later.

Affected

introducedfixedlast affected
01.1.1d-r1-

Fixed versions

1.1.1d-r1

Sources

published · modified · JSON