Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | openssl | 1.1.1d-0+deb10u7 |
| Debian · 11 | openssl | 1.1.1k-1+deb11u1 |
Vulnerabilities 2
-
Critical 9.8
SM2 Decryption Buffer Overflow
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramet…
-
High 7.4
Read buffer overruns processing ASN.1 strings
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string dat…