Path to this page:
Subject: CVS commit: pkgsrc/security/wolfssl
From: Santhosh Raju
Date: 2022-01-08 10:48:16
Message id: 20220108094816.9E9EBFAEC@cvs.NetBSD.org
Log Message:
security/wolfssl: Update to v5.1.1
Changes since v5.1.0:
wolfSSL Release 5.1.1 (Jan 3rd, 2022)
Release 5.1.1 of wolfSSL embedded TLS has a high vulnerability fix:
Vulnerabilities
* [High] In connections using AES-CBC or DES3 with TLS/DTLS 1.2 or 1.1 the IV
being used is not random. Users using wolfSSL version 5.0.0 or 5.1.0 doing
TLS/DTLS 1.2 or 1.1 connections, without AEAD only, should update the
version of wolfSSL used.
Files: