Re: [LFS Trac] #5723: openssl-3.5.1

#5723: openssl-3.5.1
-------------------------+-----------------------
 Reporter:  Bruce Dubbs  |       Owner:  lfs-book
     Type:  enhancement  |      Status:  reopened
 Priority:  normal       |   Milestone:  12.4
Component:  Book         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-----------------------
Comment (by Bruce Dubbs):

 Changes between 3.5.0 and 3.5.1 [1 Jul 2025]

  * Fix x509 application adds trusted use instead of rejected use.

    Issue summary: Use of -addreject option with the openssl x509
 application adds
    a trusted use instead of a rejected use for a certificate.

    Impact summary: If a user intends to make a trusted certificate
 rejected for
    a particular use it will be instead marked as trusted for that use.

    ([CVE-2025-4575])

  * Aligned the behaviour of TLS and DTLS in the event of a
 no_renegotiation
    alert being received. Older versions of OpenSSL failed with DTLS if a
    no_renegotiation alert was received. All versions of OpenSSL do this
 for TLS.
    From 3.2 a bug was exposed that meant that DTLS ignored
 no_rengotiation. We
    have now restored the original behaviour and brought DTLS back into
 line with
    TLS.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/5723#comment:5>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page