[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[openssl-gost] [gost-engine/engine] c6655a: Fix buffer overrun in creating key transport blob ...



  Branch: refs/heads/master
  Home:   https://github.com/gost-engine/engine
  Commit: c6655a0b620a3e31f085cc906f8073fe81b2fad3
      https://github.com/gost-engine/engine/commit/c6655a0b620a3e31f085cc906f8073fe81b2fad3
  Author: Dmitry Belyavskiy <beldmit@gmail.com>
  Date:   2022-05-23 (Mon, 23 May 2022)

  Changed paths:
    M e_gost_err.c
    M e_gost_err.h
    M gost_ec_keyx.c

  Log Message:
  -----------
  Fix buffer overrun in creating key transport blob according to RFC 9189, 4.2.4.1

Resolves: CVE-2022-29242


  Commit: 7df766124f87768b43b9e8947c5a01e17545772c
      https://github.com/gost-engine/engine/commit/7df766124f87768b43b9e8947c5a01e17545772c
  Author: Dmitry Belyavskiy <beldmit@gmail.com>
  Date:   2022-05-23 (Mon, 23 May 2022)

  Changed paths:
    M gost_ec_keyx.c

  Log Message:
  -----------
  Fix buffer overrun in creating key transport blob according to RFC 9189, 4.2.4.2

Resolves: CVE-2022-29242


  Commit: b2b4d629f100eaee9f5942a106b1ccefe85b8808
      https://github.com/gost-engine/engine/commit/b2b4d629f100eaee9f5942a106b1ccefe85b8808
  Author: Dmitry Belyavskiy <beldmit@gmail.com>
  Date:   2022-05-23 (Mon, 23 May 2022)

  Changed paths:
    M gost_ec_keyx.c

  Log Message:
  -----------
  On unpacking key blob output buffer size should be fixed

Related: CVE-2022-29242


Compare: https://github.com/gost-engine/engine/compare/ee1986c58ccb...b2b4d629f100