CVE-2022-3602

Advisory

Mitmproxy 9.0.1 updates its precompiled binaries with OpenSSL 3.0.7, to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

* The precompiled binaries now ship with OpenSSL 3.0.7, which resolves CVE-2022-3602 and CVE-2022-3786.
* Performance and stability improvements for WireGuard mode.
([5694](https://github.com/mitmproxy/mitmproxy/issues/5694), mhils, decathorpe)
* Fix a bug where the standalone Linux binaries would require libffi to be installed.
([5699](https://github.com/mitmproxy/mitmproxy/issues/5699), mhils)
* Hard exit when mitmproxy cannot write logs, fixes endless loop when parent process exits.
([4669](https://github.com/mitmproxy/mitmproxy/issues/4669), Prinzhorn)
* Fix a permission error affecting the Docker images.
([5700](https://github.com/mitmproxy/mitmproxy/issues/5700), mhils)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3602