08.Feb.2023
|
Encryption protocol: AmiSSL 5.7 (AmigaOS 3/4)
Version 5.7 of the open source encryption protocol AmiSSL has been released, now based on the latest version OpenSSL 3.0.8, with updated root certificates and some improvements. The changes in detail:
- Updated OpenSSL backend to full compatibility with the latest OpenSSL 3.0.8 (7.2.2023) version, which includes one high, seven moderate and one low severity fixes for newly identified vulnerabilities:
- Fixed NULL dereference during PKCS7 data verification.
- Fixed X.400 address type confusion in X.509 GeneralName.
- Fixed NULL dereference validating DSA public key.
- Fixed Invalid pointer dereference in d2i_PKCS7 functions.
- Fixed Use-after-free following BIO_new_NDEF.
- Fixed Double free after calling PEM_read_bio_ex.
- Fixed Timing Oracle in RSA Decryption.
- Fixed X.509 Name Constraints Read Buffer Overflow.
- Fixed X.509 Policy Constraints Double Locking security issue.
- Updated root certificates to latest Mozilla-based bundle provided by https://curl.se/docs/caextract.html dated 10.1.2023.
- Correctly clear thread locks before using InitSemaphore() on OS3.
- Prevent OS4 load time emulation corrupting the data in the PPC ASM optimised routines by moving data from .text section to .rodata.
- Removed redundant code in PPC ASM optimised routines.
- Removed unused PPC POWER8 specific ASM optimised routines.
Download AmigaOS 3: AmiSSL-5.7-OS3.lha (3,3 MB)
Download AmigaOS 4: AmiSSL-5.7-OS4.lha (3,1 MB)
Download SDK: AmiSSL-5.7-SDK.lha (2,3 MB) (dr)
[News message: 08. Feb. 2023, 06:07] [Comments: 0]
[Send via e-mail] [Print version] [ASCII version]
|
