New OpenSSL releases 3.1.1, 3.0.9 and 1.1.1u

[Angus Robertson 527]

OpenSSL has released new versions of the three active branches.

 

These fix a moderate severity security issue CVE-2023-2650, which is a possible denial of service translating ASN.1 object specially crafted very long identifiers in X509 certificates, OCSP responses, PKCS7/SMIME, CMS, CMP/CRMF or TS from malicious web sites.

 

Windows binaries are available in SVN and the overnight zip file and separately from

 

http://wiki.overbyte.eu/wiki/index.php/ICS_Download or https://www.magsys.co.uk/delphi/magics.asp

 

Separately, YuOpenSSL has released 3.0.9 and 1.1.1u as commercial DCUs allowing applications to be used with OpenSSL without needing separate DLLs.

 

Angus