]> git.ipfire.org Git - thirdparty/openssl.git/commit
Verify ASN1 object's types before attempting to access them
authorBob Beck <beck@openssl.org>
Wed, 7 Jan 2026 18:29:48 +0000 (11:29 -0700)
committerTomas Mraz <tomas@openssl.org>
Mon, 26 Jan 2026 19:54:30 +0000 (20:54 +0100)
commit4e254b48ad93cc092be3dd62d97015f33f73133a
tree2ee86dc3b980d7b78bb1265ab3b432d11c8fddbe
parent52d23c86a54adab5ee9f80e48b242b52c4cc2347
Verify ASN1 object's types before attempting to access them
as a particular type

Issue was reported in ossl_ess_get_signing_cert but is also present in
ossl_ess_get_signing_cert_v2.

Fixes: https://github.com/openssl/srt/issues/61
Fixes CVE-2025-69420

Reviewed-by: Norbert Pocs <norbertp@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
MergeDate: Mon Jan 26 19:53:36 2026
(cherry picked from commit ea8fc4c345fbd749048809c9f7c881ea656b0b94)
crypto/ts/ts_rsp_verify.c