zzy/openssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove a CVE reference from CHANGES/NEWS

Browse Source 
master/3.2 was never vulnerable to CVE-2023-5678 since it was fixed before
it was released.

Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23432)
This commit is contained in:
Matt Caswell 2024-01-30 16:51:52 +00:00 committed by Tomas Mraz
parent 504e72fc1a
commit afb19f07ae
2 changed files with 13 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
CHANGES.md
View File

@ -160,6 +160,13 @@ OpenSSL 3.2
*Rohan McLure* *Rohan McLure*
* Disable building QUIC server utility when OpenSSL is configured with
`no-apps`.
*Vitalii Koshura*
### Changes between 3.1 and 3.2.0 [23 Nov 2023]
* Fix excessive time spent in DH check / generation with large Q parameter * Fix excessive time spent in DH check / generation with large Q parameter
value. value.
@ -174,13 +181,6 @@ OpenSSL 3.2
*Richard Levitte* *Richard Levitte*
* Disable building QUIC server utility when OpenSSL is configured with
`no-apps`.
*Vitalii Koshura*
### Changes between 3.1 and 3.2.0 [23 Nov 2023]
* The BLAKE2b hash algorithm supports a configurable output length * The BLAKE2b hash algorithm supports a configurable output length
by setting the "size" parameter. by setting the "size" parameter.

9
NEWS.md
View File

@ -43,9 +43,6 @@ This release incorporates the following bug fixes and mitigations:
* Fixed POLY1305 MAC implementation corrupting vector registers on PowerPC * Fixed POLY1305 MAC implementation corrupting vector registers on PowerPC
CPUs which support PowerISA 2.07 CPUs which support PowerISA 2.07
([CVE-2023-6129]) ([CVE-2023-6129])
* Fixed excessive time spent in DH check / generation with large Q parameter
value
[(CVE-2023-5678)]
### Major changes between OpenSSL 3.1 and OpenSSL 3.2.0 [23 Nov 2023] ### Major changes between OpenSSL 3.1 and OpenSSL 3.2.0 [23 Nov 2023]
@ -121,6 +118,12 @@ This release incorporates the following documentation enhancements:
See [OpenSSL Guide]. See [OpenSSL Guide].
This release incorporates the following bug fixes and mitigations:
* Fixed excessive time spent in DH check / generation with large Q parameter
value
([CVE-2023-5678])
A more detailed list of changes in this release can be found in the A more detailed list of changes in this release can be found in the
[CHANGES.md] file. [CHANGES.md] file.