tocsin

Debian/openssl: high 7.5

Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer de

Action: Upgrade openssl to 3.5.6-1~deb13u2 or later.

Affected

introducedfixedlast affected
03.5.6-1~deb13u2-

Fixed versions

3.5.6-1~deb13u2

Sources

published · modified · JSON