Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix CVE-2023-4807 #530

Merged
merged 2 commits into from
Dec 4, 2023
Merged

Fix CVE-2023-4807 #530

merged 2 commits into from
Dec 4, 2023

Conversation

dongbeiouba
Copy link
Member

Checklist
  • 在 https://yuque.com/tsdoc 增加或更新了必要的文档
  • 增加或更新了必要的测试用例
  • 对于重要修改，更新了CHANGES文件
  • 当前修改存在对已有API参数或返回值的改变
  • 当前修改存在对旧版本功能的兼容性改变（如网络协议或密码算法）

@dongbeiouba
Avoid clobbering non-volatile XMM registers
02f9b12 
This affects some Poly1305 assembler functions
which are only used for certain CPU types.

Remove those functions for Windows targets,
as a simple interim solution.

Refer to openssl/openssl#21522.

Fix CVE-2023-4807.
@dongbeiouba
Add CVE-2023-4807 to CHANGES
66a38f8
@dongbeiouba dongbeiouba added bug Something isn't working master labels Nov 28, 2023
@dongbeiouba dongbeiouba requested review from InfoHunter, wa5i and a team November 28, 2023 09:30
@dongbeiouba dongbeiouba linked an issue Nov 28, 2023 that may be closed by this pull request
CVE-2023-4807 #527
Closed
wa5i
wa5i approved these changes Nov 28, 2023
View reviewed changes
Copy link
Contributor

@wa5i wa5i left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@InfoHunter InfoHunter merged commit 8d6d189 into Tongsuo-Project:master Dec 4, 2023
77 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@wa5i wa5i wa5i approved these changes

@InfoHunter InfoHunter Awaiting requested review from InfoHunter

Assignees
No one assigned
Labels
bug Something isn't working master
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

CVE-2023-4807
3 participants
@dongbeiouba @wa5i @InfoHunter