Debian/openssl: medium 5.9
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling appli
Action: Upgrade openssl to 1.1.0b-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.0b-2 | - |
Fixed versions
| 1.1.0b-2 |
Sources
published · modified · JSON