GoAhead before 6.1.1 has three TLS bugs in crypto backends
Original title: Three TLS Bugs in GoAhead web server prior to 6.1.1
A foxio.io write-up covers flaws in GoAhead's OpenSSL, LibreSSL, and Mbed TLS code; the note omits the details.
Alan Coopersmith posted to oss-security on October 27 about TLS bugs in EmbedThis GoAhead before 6.1.1. A foxio.io blog discloses flaws in GoAhead's code for the OpenSSL, LibreSSL, and Mbed TLS backends. The mailing-list text stops before the blog's TLDR and further technical detail.
Unconfirmed: The snippet does not include the blog's description of impact, CVEs, or exploitation status.
- Alan Coopersmith posted the note on October 27.
- The bugs are in GoAhead code for three TLS backends.
- GoAhead is an embeddable web server under GPL or a commercial license.
- The post says versions prior to 6.1.1 are affected.
| Product | Affected | Fixed in |
|---|---|---|
| EmbedThis GoAhead | prior to 6.1.1 | 6.1.1 |
- 1.Upgrade EmbedThis GoAhead to 6.1.1 or later.
- Vendors
- EmbedThis
From the original article
Posted by Alan Coopersmith on Oct 27 EmbedThis GoAhead is an embeddable web server available under GPL or https://github. com/embedthis/goahead ). https://foxio.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.