Skip to content
OpenAdvisories

Package · Wolfi

openssl-doc

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    OpenSSL TLS 1.3 server may choose unexpected key agreement group

    Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the 'DEFAULT' keyword. Impact summary: A less preferred key exchange may be used e…

  • Medium 6.5

    The x509 application adds trusted use instead of rejected use

    Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked a…