NCSC-NL/OpenSSL-2022
View on GitHub ↗ ★ 530
Operational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3
8 mentions on Hacker News by 7 people: 4 stories, 4 comments · first 2022-11-01 · latest 2022-11-02
20082026
-
NCSC is calling it SpookySSL but I think it is just for funsies. https://github.com/NCSC-NL/OpenSSL-2022
comment by jabroni_salad · 2022-11-01 · in OpenSSL 3.0.7 fixes X.509 email address buffer overflows -
…that are a bit longer in operation (but still well within their support cycle) don't need patching. https://github.com/NCSC-NL/OpenSSL-2022/tree/main/software EDIT just to add this quote from their blog post (…
comment by input_sh · 2022-11-01 · in OpenSSL 3.0.7 fixes X.509 email address buffer overflows -
Affected (and unaffected) software tracking page shared earlier today: https://github.com/NCSC-NL/OpenSSL-2022/blob/main/software/R...
comment by macintux · 2022-11-01 · in OpenSSL 3.0.7 fixes X.509 email address buffer overflows -
This is a good overview of what’s vulnerable: https://github.com/NCSC-NL/OpenSSL-2022/blob/main/software/R...
comment by macintux · 2022-11-01 · in OpenSSL 3.0.7 fixes X.509 email address buffer overflows