FEDORA-2016-a555159613 — security update for openssl

openssl-1.0.2j-1.fc24

FEDORA-2016-a555159613 created by tmraz 3 years ago for Fedora 24

stable

Update from upstream with multiple security issues fixed.

How to install

sudo dnf upgrade --advisory=FEDORA-2016-a555159613

This update has been submitted for testing by tmraz. 3 years ago

hreindl commented & provided feedback 3 years ago

karma

deployed on Sep 22 18:05 to production machines, long before it was in updates-testing which takes reapeatly way too long at Fedora

hreindl provided feedback 3 years ago

tmraz edited this update. New build(s): - openssl-1.0.2j-1.fc24 Removed build(s): - openssl-1.0.2i-2.fc24 3 years ago

hreindl commented & provided feedback 3 years ago

karma

after running non-critical infrastructure for some hours now depleyoed to production machines

This update has been pushed to testing. 3 years ago

This update has been submitted for stable by bodhi. 3 years ago

cserpentis commented & provided feedback 3 years ago

karma

works for me

dhgutteridge commented & provided feedback 3 years ago

karma

No regressions noted.

This update has been pushed to stable. 3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

Builds

openssl-1.0.2j-1.fc24

Settings

Unstable by Karma

-2

Stable by Karma

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

modified

3 years ago

BZ#1341705 CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase

BZ#1341706 CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase [fedora-all]

BZ#1343400 CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation

BZ#1343401 CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation [fedora-all]

BZ#1359615 CVE-2016-2180 OpenSSL: OOB read in TS_OBJ_print_bio()

BZ#1359616 CVE-2016-2180 OpenSSL: OOB read in TS_OBJ_print_bio() [fedora-all]

BZ#1367340 CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()

BZ#1367343 CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() [fedora-all]

BZ#1369113 CVE-2016-2181 openssl: DTLS replay protection bypass allows DoS against DTLS connection

BZ#1369114 CVE-2016-2181 openssl: DTLS replay protection bypass via sending large sequence number [fedora-all]

BZ#1369504 CVE-2016-2179 openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer

BZ#1369505 CVE-2016-2179 openssl: DoS attack by filling up the queue for future messages [fedora-all]

BZ#1369855 CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks

BZ#1369858 CVE-2016-6302 openssl: Insufficient ticket sanity checks [fedora-all]

BZ#1377594 CVE-2016-6306 openssl: certificate message OOB reads

BZ#1377600 CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth

BZ#1378408 CVE-2016-6304 CVE-2016-6306 openssl: various flaws [fedora-all]

BZ#1379310 CVE-2016-7052 openssl: Missing CRL sanity check

openssl-1.0.2j-1.fc24

How to install

Automated Test Results