HomeFreeBSD

Update to 2.6.0

Description

Update to 2.6.0

Bugfixes and some new features. Most notable fix:

  • CVE-2018-9860 Fix a bug decrypting TLS CBC ciphertexts which could for a malformed ciphertext cause the decryptor to read and HMAC an additional 64K bytes of data which is not part of the record. This could cause a crash if the read went into unmapped memory. No information leak or out of bounds write occurs.

PR: 227455
Submitted by: maintainer

Details

Provenance
krionAuthored on
Parents
rP467145: Try and prevent people from adding github archive urls.
Branches
Unknown
Tags
Unknown