Debian/openssl: medium 5.3
Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary
Action: Upgrade openssl to 3.5.7-1~deb13u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.7-1~deb13u3 | - |
Fixed versions
| 3.5.7-1~deb13u3 |
Sources
published · modified · JSON