Skip to content

OpenSSL 1.1.0l
Compare
Choose a tag to compare
@quarckster quarckster released this 18 Sep 10:34
· 18218 commits to master since this release
OpenSSL_1_1_0l
This tag was signed with the committer’s verified signature.
mattcaswell Matt Caswell
GPG key ID: D9C4D26D0E604491
Learn about vigilant mode.
7ea5bd2

Changelog

  • Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
    (CVE-2019-1563)
  • For built-in EC curves, ensure an EC_GROUP built from the curve name is
    used even when parsing explicit parameters
  • Compute ECC cofactors if not provided during EC_GROUP construction
    (CVE-2019-1547)
  • Use Windows installation paths in the mingw builds (CVE-2019-1552)
Assets 6
Loading