FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-02-11 16:51:56 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
a64761a1-e895-11ef-873e-8447094a420f	OpenSSL -- Man-in-the-Middle vulnerability The OpenSSL project reports: RFC7250 handshakes with unauthenticated servers don't abort as expected (High). Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Discovery 2025-02-11 Entry 2025-02-11 openssl32 < 3.2.4 openssl33 < 3.3.2 openssl34 < 3.4.1 CVE-2024-12797 https://openssl-library.org/news/secadv/20250211.txt

VuXML ID

Description

a64761a1-e895-11ef-873e-8447094a420f

OpenSSL -- Man-in-the-Middle vulnerability

The OpenSSL project reports:

RFC7250 handshakes with unauthenticated servers don't abort as expected (High). Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set.

Discovery 2025-02-11
Entry 2025-02-11
openssl32

< 3.2.4

openssl33

< 3.3.2

openssl34

< 3.4.1

CVE-2024-12797
https://openssl-library.org/news/secadv/20250211.txt