8000 Fix: OpenSSL memory leaks and vulnerabilities associated with older SSL/TLS protocols by dnzbk · Pull Request #591 · nzbgetcom/nzbget · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Fix: OpenSSL memory leaks and vulnerabilities associated with older SSL/TLS protocols #591

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Jun 20, 2025
Merged

Fix: OpenSSL memory leaks and vulnerabilities associated with older SSL/TLS protocols #591

merged 1 commit into from
Jun 20, 2025

Conversation

dnzbk
Copy link
Collaborator
@dnzbk dnzbk commented Jun 20, 2025

Description

  • Fixed memory leaks caused by unreleased per-thread OpenSSL resources.
  • Security Improvement: Migrated from SSLv23_method() to TLS_method() to mitigate known vulnerabilities associated with older SSL/TLS protocols and enforce the use of modern, secure TLS protocols supported.
  • Updated OpenSSL API usage to remove deprecated functions and improve compatibility.
  • Resolved compiler warnings for cleaner and more maintainable code.
  • Deprecated building the app without TLS support (to be removed in future releases).
  • Refactored code to use std::string instead of CString for improved string handling.

Testing

  • macOS Ventura amd64 OpenSSL 3.4.1 / 1.1.1
  • Windows 7 amd64 OpenSSL 3.4.1
  • Windows 11 amd64 OpenSSL 3.4.1
  • Linux Debian 12 amd64 OpenSSL 3.4.1
  • FreeBSD 13 amd64 OpenSSL 3.4.1

@dnzbk dnzbk requested review from phnzb and luckedea June 20, 2025 10:12
@dnzbk dnzbk linked an issue Jun 20, 2025 that may be closed by this pull request
Memory leak #536
Closed
1 task
@dnzbk dnzbk merged commit 898e6fa into develop Jun 20, 2025
21 checks passed
@dnzbk dnzbk deleted the fix/memory-leaks branch June 20, 2025 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@luckedea luckedea luckedea approved these changes

@phnzb phnzb Awaiting requested review from phnzb

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Memory leak
2 participants
@dnzbk @luckedea
0