08.Feb.2023
|
Verschlüsselungsprotokoll: AmiSSL 5.7 (AmigaOS 3/4)
Version 5.7 des Open-Source-Verschlüsselungsprotokoll AmiSSL wurde veröffentlicht, die nun auf der neuesten Version OpenSSL 3.0.8 basiert und aktualisierte Root-Zertifikate und einige Verbesserungen enthält. Die Änderungen im Detail:
- Updated OpenSSL backend to full compatibility with the latest OpenSSL 3.0.8 (7.2.2023) version, which includes one high, seven moderate and one low severity fixes for newly identified vulnerabilities:
- Fixed NULL dereference during PKCS7 data verification.
- Fixed X.400 address type confusion in X.509 GeneralName.
- Fixed NULL dereference validating DSA public key.
- Fixed Invalid pointer dereference in d2i_PKCS7 functions.
- Fixed Use-after-free following BIO_new_NDEF.
- Fixed Double free after calling PEM_read_bio_ex.
- Fixed Timing Oracle in RSA Decryption.
- Fixed X.509 Name Constraints Read Buffer Overflow.
- Fixed X.509 Policy Constraints Double Locking security issue.
- Updated root certificates to latest Mozilla-based bundle provided by https://curl.se/docs/caextract.html dated 10.1.2023.
- Correctly clear thread locks before using InitSemaphore() on OS3.
- Prevent OS4 load time emulation corrupting the data in the PPC ASM optimised routines by moving data from .text section to .rodata.
- Removed redundant code in PPC ASM optimised routines.
- Removed unused PPC POWER8 specific ASM optimised routines.
Download AmigaOS 3: AmiSSL-5.7-OS3.lha (3,3 MB)
Download AmigaOS 4: AmiSSL-5.7-OS4.lha (3,1 MB)
Download SDK: AmiSSL-5.7-SDK.lha (2,3 MB) (dr)
[Meldung: 08. Feb. 2023, 06:07] [Kommentare: 2 - 08. Feb. 2023, 10:17]
[Per E-Mail versenden] [Druck-Version] [ASCII-Version]
|
