2 matches found
GHSA-FH2R-99Q2-6MMG rustls-webpki: CPU denial of service in certificate path building
When this crate is given a pathological certificate chain to validate, it will spend CPU time exponential with the number of candidate certificates at each step of path building. Both TLS clients and TLS servers that accept client certificate are affected. We now give each path building operation...
OESA-2022-1924 linux-sgx security update
IntelR Software Guard Extensions IntelR SGX is an Intel technology for application developers seeking to protect select code and data from disclosure or modification. Security Fixes: The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for...