pyca/pyopenssl

CVE-2024-4741

baltamar3 opened this issue · 1 comments

What ?

A use-after-free vulnerability was found in OpenSSL. Calling the OpenSSL API SSL_free_buffers function may cause memory to be accessed that was previously freed in some situations.
https://bugzilla.redhat.com/show_bug.cgi?id=2283757

alex commented

pyOpenSSL doesn't use this function, not does it distribute it's own copy of openssl in any event