blob: c29a3dc3dee1a20a79e4212e7cbd9b91c9e52419 [file] [view]
# OpenSSL Advisory: January 25th, 2024 (BoringSSL Not Affected)
OpenSSL have published a [security advisory](https://www.openssl.org/news/secadv/20240125.txt). Here's how it affects BoringSSL:
CVE | Summary | [Severity] in OpenSSL | Impact to BoringSSL
----|---------|-----------------------|---------------------
CVE-2024-0727 | PKCS12 Decoding crashes | Low | Not affected; BoringSSL has an independent PKCS#12 parser that was not affected
[Severity]: https://openssl-library.org/policies/general/security-policy/index.html#issue-severity