Path to this page:
Subject: CVS commit: pkgsrc/security/openssl
From: Thomas Klausner
Date: 2025-02-11 22:27:36
Message id: 20250211212736.30093FBE0@cvs.NetBSD.org
Log Message:
openssl: update to 3.4.1.
### Major changes between OpenSSL 3.4.0 and OpenSSL 3.4.1 [11 Feb 2025]
OpenSSL 3.4.1 is a security patch release. The most severe CVE fixed in this
release is High.
This release incorporates the following bug fixes and mitigations:
* Fixed RFC7250 handshakes with unauthenticated servers don't abort as expected.
([CVE-2024-12797])
* Fixed timing side-channel in ECDSA signature computation.
([CVE-2024-13176])
Files: