projects / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 982fad3) | patch
c_rehash: Do not use shell to invoke openssl
authorTomas Mraz <tomas@openssl.org>
Tue, 26 Apr 2022 10:40:24 +0000 (12:40 +0200)
committerMatt Caswell <matt@openssl.org>
Tue, 3 May 2022 10:09:18 +0000 (11:09 +0100)
commite5fd1728ef4c7a5bf7c7a7163ca60370460a6e23
treeb83cdf500c39dc24ab2f073340488ccf059cc7c4tree | snapshot
parent982fad3ec4107684a6cb442f593193972b06c41acommit | diff
c_rehash: Do not use shell to invoke openssl

Except on VMS where it is safe.

This fixes CVE-2022-1292.

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
tools/c_rehash.in diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.