FreshPorts - VuXML

SO-AND-SO reports:

Moderate severity: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers.

< 3.0.12,1

< 3.1.4

< 3.0.12

SO-AND-SO reports:

The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions.

< 3.0.12_2,1

< 3.0.12_2

< 3.1.4_2

< 3.1.4_2

< 3.2.0_1

The OpenSSL project reports:

Checking excessively long DH keys or parameters may be very slow (severity: Low).

< 1.1.1u_1,1

< 3.0.9_2

< 3.1.1_2

The OpenSSL project reports:

The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence.

< 3.0.9_1

< 3.1.1_1

The OpenSSL project reports:

Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions

< 3.0.13_3,1

< 3.1.5_3

< 3.2.1_2

< 3.0.13_3

< 3.1.5_1

The OpenSSL project reports:

Excessive time spent in DH check / generation with large Q parameter value (low). Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.

< 3.0.12_1,1

< 1.1.1w_1

< 3.1.4_1

< 3.0.12_1

< 3.1.4_1

The OpenSSL project reports:

Excessive time spent checking invalid RSA public keys (CVE-2023-6237)

PKCS12 Decoding crashes (CVE-2024-0727)

< 3.0.13,1

< 3.0.13

< 3.1.5

< 3.1.5

< 3.2.1