FreshPorts - VuXML

The OpenSSL project reports:

Low-level invalid GF(2^m) parameters lead to OOB memory access (CVE-2024-9143) (Low)

Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes.

< 3.0.15_1,1

< 3.1.7_1

< 3.2.3_1

< 3.3.2_1

< 3.0.15_1,1

< 3.1.7_1

The OpenSSL project reports:

Possible denial of service in X.509 name checks [Moderate severity] Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process.

SSL_select_next_proto buffer overread [Low severity] Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.

< 3.0.15,1

< 3.1.7

< 3.2.3

< 3.3.2

< 3.0.15

< 3.1.7

>= 14.1 lt 14.1_4

>= 14.0 lt 14.0_10