We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 102420c commit bb7299eCopy full SHA for bb7299e
RELEASES.md
@@ -3,7 +3,9 @@ Version 0.17.12 (2025-03-05)
3
Bug fix: https://github.com/briansmith/ring/pull/2447 for denial of service (DoS).
4
5
* Fixes a panic in `ring::aead::quic::HeaderProtectionKey::new_mask()` when
6
-integer overflow checking is enabled.
+integer overflow checking is enabled. In the QUIC protocol, an attacker can
7
+induce this panic by sending a specially-crafted packet. Even unintentionally
8
+it is likely to occur in 1 out of every 2**32 packets sent and/or received.
9
10
* Fixes a panic on 64-bit targets in `ring::aead::{AES_128_GCM, AES_256_GCM}`
11
when overflow checking is enabled, when encrypting/decrypting approximately
0 commit comments