Debian/openssl: high 7.5
A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but
Action: Upgrade openssl to 3.0.8-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.8-1 | - |
Fixed versions
| 3.0.8-1 |
Sources
published · modified · JSON