projects / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7d56a74) | patch
c_rehash: Do not use shell to invoke openssl
authorTomas Mraz <tomas@openssl.org>
Tue, 26 Apr 2022 10:40:24 +0000 (12:40 +0200)
committerMatt Caswell <matt@openssl.org>
Tue, 3 May 2022 10:08:36 +0000 (11:08 +0100)
commit1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2
tree733e963c085fe9078b870921cd61ce2edf32e7a2tree | snapshot
parent7d56a74a96828985db7354a55227a511615f732bcommit | diff
c_rehash: Do not use shell to invoke openssl

Except on VMS where it is safe.

This fixes CVE-2022-1292.

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
tools/c_rehash.in diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.