OpenSSL Security Advisory (CVE-2021-3450, CVE-2021-3449)

CA certificate check bypass with X509_V_FLAG_X509_STRICT (CVE-2021-3450)

NULL pointer deref in signature_algorithms processing (CVE-2021-3449)

Details: https://www.openssl.org/news/secadv/20210325.txt

submitted by /u/Vulmon
[link] [comments]

from hacking: security in practice https://ift.tt/3sovkdV