Skip to content

OpenSSL 1.0.2t
Compare
Choose a tag to compare
@quarckster quarckster released this 18 Sep 10:35
· 27418 commits to master since this release
OpenSSL_1_0_2t
This tag was signed with the committer’s verified signature.
mattcaswell Matt Caswell
GPG key ID: D9C4D26D0E604491
Verified
Learn about vigilant mode.
cd7c7fc

Changelog

  • Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
    (CVE-2019-1563)
  • For built-in EC curves, ensure an EC_GROUP built from the curve name is
    used even when parsing explicit parameters
  • Compute ECC cofactors if not provided during EC_GROUP construction
    (CVE-2019-1547)
  • Document issue with installation paths in diverse Windows builds
    (CVE-2019-1552)
Assets 6
Loading