tocsin

Debian/openssl: high 8.1

Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-f

Action: Upgrade openssl to 3.0.19-1~deb12u2 or later.

Affected

introducedfixedlast affected
03.0.19-1~deb12u2-

Fixed versions

3.0.19-1~deb12u2

Sources

published · modified · JSON