We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent a6c14de commit ed92896Copy full SHA for ed92896
CHANGES.md
@@ -1,3 +1,16 @@
1
+## AmiSSL 5.19 (11.2.2025)
2
+
3
+- Updated OpenSSL backend to full compatibility with the latest
4
+ OpenSSL 3.4.1 (11.2.2025) version which includes these high and
5
+ low severity bug fixes and mitigations:
6
+ + Fixed RFC7250 handshakes with unauthenticated servers don't abort
7
+ as expected.
8
+ (CVE-2024-12797)
9
+ + Fixed timing side-channel in ECDSA signature computation.
10
+ (CVE-2024-13176)
11
+- Updated root certificates to latest Mozilla-based bundle provided
12
+ by https://curl.se/docs/caextract.html dated 31.12.2024.
13
14
## AmiSSL 5.18 (23.10.2024)
15
16
- Switched to OpenSSL 3.4, with full compatibility with the latest
0 commit comments