blob: 9ba70285be84479a62358476ee68aa484b4edeae [file] [view]
# OpenSSL Advisory: December 13th, 2022 (BoringSSL Not Affected)
OpenSSL have published a [security advisory](https://www.openssl.org/news/secadv/20221213.txt). Here's how it affects BoringSSL:
CVE | Summary | [Severity] in OpenSSL | Impact to BoringSSL
----|---------|-----------------------|---------------------
CVE-2022-3996 | X.509 Policy Constraints Double Locking | Low | Not affected; bug was introduced after fork.
[Severity]: https://openssl-library.org/policies/general/security-policy/index.html#issue-severity