Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix CVE-2023-4807 #531

Merged
merged 2 commits into from
Dec 4, 2023
Merged

Fix CVE-2023-4807 #531

merged 2 commits into from
Dec 4, 2023

Conversation

dongbeiouba
Copy link
Member

Checklist
  • 在 https://yuque.com/tsdoc 增加或更新了必要的文档
  • 增加或更新了必要的测试用例
  • 对于重要修改，更新了CHANGES文件
  • 当前修改存在对已有API参数或返回值的改变
  • 当前修改存在对旧版本功能的兼容性改变（如网络协议或密码算法）

@dongbeiouba dongbeiouba added bug Something isn't working branch-8.4 labels Nov 28, 2023
@dongbeiouba dongbeiouba requested review from InfoHunter, wa5i and a team November 28, 2023 09:42
@dongbeiouba dongbeiouba linked an issue Nov 28, 2023 that may be closed by this pull request
CVE-2023-4807 #527
Closed
@dongbeiouba
Avoid clobbering non-volatile XMM registers
2025617 
This affects some Poly1305 assembler functions
which are only used for certain CPU types.

Remove those functions for Windows targets,
as a simple interim solution.

Refer to openssl/openssl#21522.

Fix CVE-2023-4807.
@dongbeiouba
Add CVE-2023-4807 to CHANGES
2df789f
@InfoHunter InfoHunter merged commit 2921eca into Tongsuo-Project:8.4-stable Dec 4, 2023
74 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@InfoHunter InfoHunter InfoHunter approved these changes

@wa5i wa5i Awaiting requested review from wa5i

Assignees
No one assigned
Labels
branch-8.4 bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

CVE-2023-4807
2 participants
@dongbeiouba @InfoHunter