Debian/openssl: low 3.7
Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents
Action: Upgrade openssl to 3.0.20-1~deb12u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.20-1~deb12u2 | - |
Fixed versions
| 3.0.20-1~deb12u2 |
Sources
published · modified · JSON