File tree Expand file tree Collapse file tree 1 file changed +5
-2
lines changed
Expand file tree Collapse file tree 1 file changed +5
-2
lines changed Original file line number Diff line number Diff line change @@ -16,7 +16,7 @@ CVE-2022-0778
1616# The vulnerability does affect nignx, postgres, syslog-ng version of OpenSSL 1.1.1
1717# nignx, postgres, syslog-ng does not use SM2 algorithm
1818# if there will be a need in the SM* algorithms OpenSSL 1.1.1 Ubuntu package should be updated to the last version
19- # There's a test in the appliance build that validates that the algs are not in list
19+ # There's a test in the appliance build that validates that the algs are not in list
2020# features/tls_min_version_verification.feature
2121CVE-2021-3711
2222
@@ -43,7 +43,7 @@ CVE-2020-1967
4343# function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME
4444# to see if they are equal or not. This function behaves incorrectly when both
4545# GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash
46- # may occur leading to a possible denial of service attack.
46+ # may occur leading to a possible denial of service attack.
4747# OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes:
4848#
4949# 1) Comparing CRL distribution point names between an available CRL and a CRL
@@ -87,3 +87,6 @@ CVE-2020-1971
8787#
8888# Performed by @jtuttle, approved by @andytinkham
8989CVE-2021-3449
90+
91+ # Temporarily ignore CVE-2023-0286 until OpenSSL is updated in the base image
92+ CVE-2023-0286
You can’t perform that action at this time.
0 commit comments