Update from upstream with multiple security issues fixed.
sudo dnf upgrade --advisory=FEDORA-2016-64e0743e16Please login to add feedback.
| submitted | 3 years ago |
| in testing | 3 years ago |
| in stable | 3 years ago |
| modified | 3 years ago |
| 0 | 0 | #1341705 CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase |
| 0 | 0 | #1341706 CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase [fedora-all] |
| 0 | 0 | #1343400 CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation |
| 0 | 0 | #1343401 CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation [fedora-all] |
| 0 | 0 | #1359615 CVE-2016-2180 OpenSSL: OOB read in TS_OBJ_print_bio() |
| 0 | 0 | #1359616 CVE-2016-2180 OpenSSL: OOB read in TS_OBJ_print_bio() [fedora-all] |
| 0 | 0 | #1367340 CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() |
| 0 | 0 | #1367343 CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() [fedora-all] |
| 0 | 0 | #1369113 CVE-2016-2181 openssl: DTLS replay protection bypass allows DoS against DTLS connection |
| 0 | 0 | #1369114 CVE-2016-2181 openssl: DTLS replay protection bypass via sending large sequence number [fedora-all] |
| 0 | 0 | #1369504 CVE-2016-2179 openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer |
| 0 | 0 | #1369505 CVE-2016-2179 openssl: DoS attack by filling up the queue for future messages [fedora-all] |
| 0 | 0 | #1369855 CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks |
| 0 | 0 | #1369858 CVE-2016-6302 openssl: Insufficient ticket sanity checks [fedora-all] |
| 0 | 0 | #1377594 CVE-2016-6306 openssl: certificate message OOB reads |
| 0 | 0 | #1377600 CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth |
| 0 | 0 | #1378408 CVE-2016-6304 CVE-2016-6306 openssl: various flaws [fedora-all] |
| 0 | 0 | #1379310 CVE-2016-7052 openssl: Missing CRL sanity check |
tmraz
This update has been submitted for testing by tmraz.
tmraz edited this update.
New build(s):
Removed build(s):
This update has been pushed to testing.
Works fine! LGTM! =)
This update has been submitted for stable by bodhi.
Works for me.
This update has been pushed to stable.