From 8aa97d71186501404728118a9e5eee67d821bda5 Mon Sep 17 00:00:00 2001 From: yrutschle Date: Wed, 6 Aug 2025 09:55:19 +0200 Subject: [PATCH] Include OpenSUSE's security review --- README.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/README.md b/README.md index 58e2e85..1fe3b09 100644 --- a/README.md +++ b/README.md @@ -30,6 +30,20 @@ Install Please refer to the [install guide](doc/INSTALL.md). +Security +======== + +Matthias Gerstner from OpenSUSE has performed a code review +of `sslh` from a security point of view, which revealed a +number of problems, including two CVE. His findings have +already been taken partly into account for the more critical +ones. The [full +review](https://security.opensuse.org/2025/06/13/sslh-denial-of-service-vulnerabilities.html) +is well worth reading if you are using `sslh` in production. + +Part of the securing your installation involves configuring +connection limits. This is described in [this +guide](doc/max_connections.md). Configuration =============