FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-23 17:01:17 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
bad6588e-2fe0-11ee-a0d1-84a93843eb75OpenSSL -- Excessive time spent checking DH q parameter value

The OpenSSL project reports:

Checking excessively long DH keys or parameters may be very slow (severity: Low).


Discovery 2023-07-31
Entry 2023-07-31
openssl
< 1.1.1u_1,1

openssl30
< 3.0.9_2

openssl31
< 3.1.1_2

CVE-2023-3817
https://www.openssl.org/news/secadv/20230731.txt
41c60e16-2405-11ee-a0d1-84a93843eb75OpenSSL -- AES-SIV implementation ignores empty associated data entries

The OpenSSL project reports:

The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence.


Discovery 2023-07-14
Entry 2023-07-16
openssl30
< 3.0.9_1

openssl31
< 3.1.1_1

CVE-2023-2975
https://www.openssl.org/news/secadv/20230714.txt