FEDORA-EPEL-2016-92e8b90065 created by robert 3 years ago for Fedora EPEL 5
stable

OpenSSL

Security Fixes

  • A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. (CVE-2016-2108)
  • Two integer overflow flaws, leading to buffer overflows, were found in the way the EVP_EncodeUpdate() and EVP_EncryptUpdate() functions of OpenSSL parsed very large amounts of input data. A remote attacker could use these flaws to crash an application using OpenSSL or, possibly, execute arbitrary code with the permissions of the user running that application. (CVE-2016-2105, CVE-2016-2106)
  • It was discovered that OpenSSL leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when the connection used the AES CBC cipher suite and the server supported AES-NI. A remote attacker could possibly use this flaw to retrieve plain text from encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2016-2107)
  • Several flaws were found in the way BIO_*printf functions were implemented in OpenSSL. Applications which passed large amounts of untrusted data through these functions could crash or potentially execute code with the permissions of the user running such an application. (CVE-2016-0799, CVE-2016-2842)
  • A denial of service flaw was found in the way OpenSSL parsed certain ASN.1-encoded data from BIO (OpenSSL's I/O abstraction) inputs. An application using OpenSSL that accepts untrusted ASN.1 BIO input could be forced to allocate an excessive amount of data. (CVE-2016-2109)

Bug Fixes

  • Previously, the ciphers(1) manual page did not describe the following Elliptic Curve Cryptography (ECC) cipher suite groups: Elliptic Curve Diffie–Hellman (ECDH) and Elliptic Curve Digital Signature Algorithm (ECDSA), or TLS version 1.2 (TLSv1.2) specific features. This update adds the missing description of the ECDH and ECDSA cipher groups and TLSv1.2 features to ciphers(1), and the documentation is now complete. (BZ#1119191)
  • The server-side renegotiation support did previously not work as expected under certain circumstances. A PostgreSQL failure of database dumps through TLS connection could occur when the size of the dumped data was larger than the value defined in the ssl_renegotiation_limit setting. The regression that caused this bug has been fixed, and the PostgreSQL database dumps through TLS connection no longer fail in the described situation. (BZ#1234487)

Enhancement

  • This update adds the "-keytab" option to the "openssl s_server" command and the "-krb5svc" option to the "openssl s_server" and "openssl s_client" commands. The "-keytab" option allows the user to specify a custom keytab location; if the user does not add "-keytab", the openssl utility assumes the default keytab location. The "-krb5svc" option enables selecting a service other than the "host" service; this allows unprivileged users without keys to the host principal to use "openssl s_server" and "open s_client" with Kerberos. (BZ#961965)

Reboot Required
After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

This update has been submitted for testing by robert. 3 years ago
This update has been pushed to testing. 3 years ago
robert edited this update. 3 years ago
This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes 3 years ago
This update has been submitted for stable by robert. 3 years ago
This update has been pushed to stable. 3 years ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
0
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
1
Dates
submitted
3 years ago
in testing
3 years ago
in stable
3 years ago
modified
3 years ago
BZ#1312219 CVE-2016-0799 OpenSSL: Fix memory issues in BIO_*printf functions
0
0
BZ#1312858 CVE-2016-0799 openssl101e: OpenSSL: Fix memory issues in BIO_*printf functions [epel-5]
0
0
BZ#1330101 CVE-2016-2109 openssl: ASN.1 BIO handling of large amounts of data
0
0
BZ#1330105 CVE-2016-2109 openssl101e: openssl: ASN.1 BIO handling of large amounts of data [epel-5]
0
0
BZ#1331402 CVE-2016-2108 openssl: Memory corruption in the ASN.1 encoder
0
0
BZ#1331426 CVE-2016-2107 openssl: Padding oracle in AES-NI CBC MAC check
0
0
BZ#1331441 CVE-2016-2105 openssl: EVP_EncodeUpdate overflow
0
0
BZ#1331536 CVE-2016-2106 openssl: EVP_EncryptUpdate overflow
0
0
BZ#1332590 CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2108 openssl101e: various flaws [epel-5]
0
0

Automated Test Results