Include OpenSUSE's security review

This commit is contained in:
yrutschle committed 2025-08-06 09:55:19 +02:00
1 parent 8ad8bfdb5d
commit 8aa97d7118
1 file changed
+14
+14
View File
@@ -30,6 +30,20 @@ Install
Please refer to the [install guide](doc/INSTALL.md).
Security
========
Matthias Gerstner from OpenSUSE has performed a code review
of `sslh` from a security point of view, which revealed a
number of problems, including two CVE. His findings have
already been taken partly into account for the more critical
ones. The [full
review](https://security.opensuse.org/2025/06/13/sslh-denial-of-service-vulnerabilities.html)
is well worth reading if you are using `sslh` in production.
Part of the securing your installation involves configuring
connection limits. This is described in [this
guide](doc/max_connections.md).
Configuration
=============