Summary: | <dev-libs/openssl-{3.0.12, 3.1.4}: Incorrect cipher key & IV length processing | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Patrick McLean <chutzpah> |
Component: | Current packages | Assignee: | Gentoo Security <security> |
Status: | CONFIRMED --- | ||
Severity: | normal | CC: | base-system, foufou33, jasmin+gentoo, luke |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://www.openssl.org/news/secadv/20231024.txt | ||
Whiteboard: | B3 [glsa? cleanup] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 920847 | ||
Bug Blocks: |
Description
Patrick McLean
2023-10-24 18:22:11 UTC
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=03ed151102256c7905f06b5b6c88a448975c34ef commit 03ed151102256c7905f06b5b6c88a448975c34ef Author: Sam James <sam@gentoo.org> AuthorDate: 2023-12-28 04:40:25 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2023-12-28 04:40:25 +0000 dev-libs/openssl: drop 3.0.9-r1, 3.0.9-r2, 3.0.10 Bug: https://bugs.gentoo.org/910556 Bug: https://bugs.gentoo.org/916241 Bug: https://bugs.gentoo.org/911560 Signed-off-by: Sam James <sam@gentoo.org> dev-libs/openssl/Manifest | 4 - dev-libs/openssl/openssl-3.0.10.ebuild | 288 ------------------------------ dev-libs/openssl/openssl-3.0.9-r1.ebuild | 286 ------------------------------ dev-libs/openssl/openssl-3.0.9-r2.ebuild | 293 ------------------------------- 4 files changed, 871 deletions(-) |