Link package | bugs open | bugs closed | Wiki | GitHub | web search
Description Free version of the TLS/crypto stack forked from OpenSSL
Version 3.9.2-1 [extra]


Group Affected Fixed Severity Status Ticket
AVG-2417 3.3.4-1 3.3.5-1 Medium Fixed
Issue Group Severity Remote Type Description
CVE-2021-41581 AVG-2417 Medium Yes Information disclosure
x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL before version 3.3.5 has a stack-based buffer over-read. When the input...