blob: c76958e6b792a7b1f3ef1029aacc389d05b2897c [file] [view]
# OpenSSL Advisory: June 12th, 2018 (BoringSSL Not Affected)
OpenSSL have published a [security advisory](https://openssl-library.org/news/secadv/20180612.txt). Here's how it affects BoringSSL:
CVE | Summary | [Severity] in OpenSSL | Impact to BoringSSL
----|---------|-----------------------|---------------------
CVE-2018-0732 | Client DoS due to large DH parameter | Low | Not affected; we independently fixed this in [2015](https://boringssl-review.googlesource.com/6464) and removed DHE cipher suites from TLS altogether in [2017](https://boringssl-review.googlesource.com/14284).
[Severity]: https://openssl-library.org/policies/general/security-policy/index.html#issue-severity