[Midnightbsd-cvs] [MidnightBSD/src] 86764c: Fix OpenSSL ASN.1 large length decoding

[Lucas Holt]

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 86764ca6a4a82dbede3a640a12193fd790e800ad
      https://github.com/MidnightBSD/src/commit/86764ca6a4a82dbede3a640a12193fd790e800ad
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M UPDATING
    M crypto/openssl/crypto/asn1/tasn_dec.c

  Log Message:
  -----------
  Fix OpenSSL ASN.1 large length decoding

Backport the OpenSSL CVE-2026-34180 fix to stable/4.0 by preventing long ASN.1 primitive content lengths from being truncated before callers that take int lengths.

Upstream commit: fcb23806047f5afbe55d5d601a527fc24bf7ca2c

AI-Assisted-by: OpenAI Codex



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications