oss-sec mailing list archives

Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing

From: Jeroen Roovers <jer () xs4all nl>
Date: Sun, 28 Mar 2021 21:31:59 +0200

On Sun, 28 Mar 2021 18:35:29 +0000
Mark J Cox <mark () openssl org> wrote:

Usually that process of waiting for responses takes an extra trip
around the sun due to timezones


Surely you meant to indicate a day (approximately one full rotation of
the Earth) here and not a year (one orbit of the Earth around the Sun).


Kind regards,
     jer

Current thread:

OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing Solar Designer (Mar 27)
- Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing Gordon Tetlow (Mar 27)
- Message not available
  - Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing Mark J Cox (Mar 28)
    - Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing Jeroen Roovers (Mar 28)