CVE-2023-0286

Advisory

Awscrt 0.16.11 ships with AWS-LC v1.5.0, which includes fix for CVE-2023-0286.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Allow passing None for the PKCS11 user pin by TwistedTwigleg in https://github.com/awslabs/aws-crt-python/pull/446
* Latest submodules, with fixes for OpenBSD by graebm in https://github.com/awslabs/aws-crt-python/pull/449
* Fix linking on OpenBSD by knightjoel in https://github.com/awslabs/aws-crt-python/pull/448
* AWS-LC v1.5.0 which includes fix for [CVE-2023-0286](https://github.com/advisories/GHSA-x4qr-2fvf-3mr5)

New Contributors
* knightjoel made their first contribution in https://github.com/awslabs/aws-crt-python/pull/448

**Full Changelog**: https://github.com/awslabs/aws-crt-python/compare/v0.16.10...v0.16.11

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286