Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 21: FEDORA-2015-6855 Critical: OpenSSL Security Fix

fedora
Calendar Grey May 4, 2015
Dist Fedora Esm H88
Fedora 21 releases an updated version of mingw-openssl to 1.0.2a, correcting several security vulnerabilities and addressing various related issues.
Update to OpenSSL 1.0.2a which fixes various CVE's

Summary

The OpenSSL toolkit provides support for secure communications between

machines. OpenSSL includes a certificate management tool and shared

libraries which provide various cryptographic algorithms and

protocols.

This package contains Windows (MinGW) libraries and development tools.

Update Information:

Update to OpenSSL 1.0.2a which fixes various CVE's

Topics%20covered

Topics Covered

security advisory security issue Fedora OpenSSL critical fix cryptography mingw-openssl

Change Log

* Fri Apr 24 2015 Erik van Pienbroek - 1.0.2a-1 - Synced with native openssl-1.0.2a-1.fc23 - Fixes various CVE's (RHBZ #1203855 #1203856) * Mon Dec 22 2014 Erik van Pienbroek - 1.0.1j-1 - Synced with native openssl-1.0.1j-3.fc22 - Add support for RFC 5649 - Prevent compiler warning "Please include winsock2.h before windows.h" when using the OpenSSL headers- Fixes various CVE's (RHBZ #1127889 #1127709 #1152851)

References


[ 1 ] Bug #1203855 - CVE-2015-0209 CVE-2015-0293 CVE-2015-0287 CVE-2015-0286 CVE-2015-0289 CVE-2015-0288 mingw-openssl: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1203855

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mingw-openssl' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-openssl
Product: Fedora 21
Version: 1.0.2a
Release: 1.fc21
URL: https://www.openssl.org:443/
Summary: MinGW port of the OpenSSL toolkit

Topics%20covered

Topics Covered

security advisory security issue Fedora OpenSSL critical fix cryptography mingw-openssl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here