openssl+quic (quictls) 3.0.16 rpms released

openssl+quic (quictls) 3.0.16 rpms released and added to all supported platforms.

OpenSSL 3.0.16 is a security patch release.

This release incorporates the following bug fixes and mitigations:

Fixed timing side-channel in ECDSA signature computation. (CVE-2024-13176)

Fixed possible OOB memory access with invalid low-level GF(2^m) elliptic curve parameters. (CVE-2024-9143)

Leave a Reply

Your email address will not be published. Required fields are marked *