AVG-144 log

Package lib32-openssl
Status Not affected
Severity High
Type denial of service
Affected 1:1.1.0.a-1
Fixed 1:1.1.0.c-1
Current 1:3.4.0-1 [multilib]
Ticket None
Created Sun Jan 15 21:51:55 2017
Issue Severity Remote Type Description
CVE-2016-7054 High Yes Denial of service
TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a denial of service attack via application crash by corrupting larger payloads.
Notes
This issue does not affect OpenSSL versions prior to 1.1.0