FreshPorts - VuXML

SO-AND-SO reports:

Moderate severity: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers.

< 3.0.12,1

< 3.1.4

< 3.0.12

The OpenSSL project reports:

Excessive time spent checking invalid RSA public keys (CVE-2023-6237)

PKCS12 Decoding crashes (CVE-2024-0727)

< 3.0.13,1

< 3.0.13

< 3.1.5

< 3.1.5

< 3.2.1

The OpenSSL project reports:

Excessive time spent in DH check / generation with large Q parameter value (low). Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.

< 3.0.12_1,1

< 1.1.1w_1

< 3.1.4_1

< 3.0.12_1

< 3.1.4_1

SO-AND-SO reports:

The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions.

< 3.0.12_2,1

< 3.0.12_2

< 3.1.4_2

< 3.1.4_2

< 3.2.0_1