1. Takehiko NOZAKI Avatar Takehiko NOZAKI
  2. idiot
  3. NetBSD
  4. Issues

[tnozaki-openssl] CVE-2023-0466 Certificate policy check not enabled

Issue #345 resolved
Takehiko NOZAKI repo owner created an issue

see https://www.openssl.org/news/secadv/20230328.txt

Comments (2)

  2. Takehiko NOZAKI reporter

    BUGFIX: Issue #345 - CVE-2023-0466 Certificate policy check not enabled

    Cherry-picked from: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a

    Original commit message: Fix documentation of X509_VERIFY_PARAM_add0_policy()

    The function was incorrectly documented as enabling policy checking.

    Fixes: CVE-2023-0466

    Reviewed-by: Matt Caswell matt@openssl.org Reviewed-by: Paul Dale pauli@openssl.org (Merged from https://github.com/openssl/openssl/pull/20564)

    → <<cset 83615390d7ab>>

  3. Log in to comment
Assignee
–
Type
bug
Priority
major
Status
resolved
Votes
0
Watchers
1