Debian/openssl: medium 5.9
There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because
Action: Upgrade openssl to 1.1.1m-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.1m-1 | - |
Fixed versions
| 1.1.1m-1 |
Sources
- osv: DEBIAN-CVE-2021-4160#Debian:14/openssl
- https://security-tracker.debian.org/tracker/CVE-2021-4160
published · modified · JSON