Skip to content

[9.2] Add validation to DER parser for seq len (#138683) #138696

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Nov 27, 2025
Merged

[9.2] Add validation to DER parser for seq len (#138683) #138696

merged 2 commits into from
Nov 27, 2025

Conversation

@ebarlas
Copy link
Contributor

@ebarlas ebarlas commented Nov 26, 2025

Backports the following commits to 9.2:

@ebarlas
Add validation to DER parser for seq len (elastic#138683)
6eed1d8 
Add validation to org.elasticsearch.common.ssl.DerParser for sequence
length that exceeds maximum signed int.
@ebarlas ebarlas added :Security/Security Security issues without another label >test Issues or PRs that are addressing/adding tests auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport Team:Security Meta label for security team labels Nov 26, 2025
@elasticsearchmachine elasticsearchmachine mentioned this pull request Nov 26, 2025
Merged
@elasticsearchmachine elasticsearchmachine merged commit ab152ef into elastic:9.2 Nov 27, 2025
40 checks passed
@ebarlas ebarlas deleted the backport/9.2/pr-138683 branch November 27, 2025 01:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport :Security/Security Security issues without another label Team:Security Meta label for security team >test Issues or PRs that are addressing/adding tests v9.2.3

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ebarlas @elasticsearchmachine