Vulnerability Bulletins |
DSA-4475 openssl - security update |
|
| Affected software | Debian |
|
Joran Dirk Greef discovered that overly long nonces used withChaCha20-Poly1305 were incorrectly processed and could result in noncereuse. This doesnt affect OpenSSL-internal uses of ChaCha20-Poly1305such as TLS. More info: https://www.debian.org/security/2019/dsa-4475 |
|