Skip to content

Security Fix - OpenSSL CVE-2022-0778
Compare
Choose a tag to compare
@bretambrose bretambrose released this 15 Mar 20:29
· 234 commits to main since this release
v1.7.1
f956ba6
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Security Fix

  • Updates the aws-lc submodule to a version that is not vulnerable to OpenSSL CVE-2022-0778 - a bug in BN_mod_sqrt() can cause the function to enter an infinite loop
Assets 2
Loading