Skip to content

v/0.100.2

Compare
Choose a tag to compare
@ctz ctz released this 22 Aug 08:52
· 501 commits to main since this release

Release notes

  • certificate path building and verification is now capped at 100 signature validation operations to avoid the risk of CPU usage denial-of-service attack when validating crafted certificate chains producing quadratic runtime. This risk affected both clients, as well as servers that verified client certificates.

What's Changed

Full Changelog: v/0.100.1...v/0.100.2