Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency openssl/openssl to v3.3.2 #102

Merged
merged 1 commit into from
Oct 1, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 3, 2024

This PR contains the following updates:

Package Update Change
openssl/openssl patch 3.3.1 -> 3.3.2

Release Notes

openssl/openssl (openssl/openssl)

v3.3.2

Compare Source

  • Fixed possible denial of service in X.509 name checks.

    Applications performing certificate name checks (e.g., TLS clients checking
    server certificates) may attempt to read an invalid memory address when
    comparing the expected name with an otherName subject alternative name of
    an X.509 certificate. This may result in an exception that terminates the
    application program.

    ([CVE-2024-6119])

    Viktor Dukhovni

  • Fixed possible buffer overread in SSL_select_next_proto().

    Calling the OpenSSL API function SSL_select_next_proto with an empty
    supported client protocols buffer may cause a crash or memory contents
    to be sent to the peer.

    ([CVE-2024-5535])

    Matt Caswell


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "before 2am" (UTC).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge (rebase) September 3, 2024 15:48
@renovate renovate bot force-pushed the renovate/openssl-openssl-3.x branch from e413e2a to d589150 Compare September 11, 2024 09:23
@renovate renovate bot force-pushed the renovate/openssl-openssl-3.x branch from d589150 to 873d214 Compare September 18, 2024 11:38
@renovate renovate bot merged commit a639759 into master Oct 1, 2024
1 check passed
@renovate renovate bot deleted the renovate/openssl-openssl-3.x branch October 1, 2024 07:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants