Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora 22 FEDORA-2015-11475 High Severity OpenSSL Certificate Forgery

fedora
Calendar Grey July 13, 2015
Scroller Fedora
Resolution for critical OpenSSL vulnerability CVE-2015-1793 in Fedora 22 enhances system security.
Security fix for CVE-2015-1793 high severity issue.

Summary

The OpenSSL toolkit provides support for secure communications between

machines. OpenSSL includes a certificate management tool and shared

libraries which provide various cryptographic algorithms and

protocols.

Update Information:

Security fix for CVE-2015-1793 high severity issue.

Topics%20covered

Topics Covered

security advisory high severity Fedora security fix OpenSSL certificate forgery

Change Log

* Thu Jul 9 2015 Tomáš Mráz 1.0.1k-11 - fix CVE-2015-1793 - certificate verification forgery * Mon Jun 15 2015 Tomáš Mráz 1.0.1k-10 - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent - fix CVE-2015-1791 - race condition handling NewSessionTicket - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function - add missing parts of CVE-2015-0209 fix for corectness although unexploitable * Fri May 29 2015 Tomáš Mráz 1.0.1k-9 - fix CVE-2015-4000 - prevent the logjam attack on client - restrict the DH key size to at least 768 bits (limit will be increased in future)

References


[ 1 ] Bug #1238619 - CVE-2015-1793 openssl: alternative chains certificate forgery https://bugzilla.redhat.com/show_bug.cgi?id=1238619

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update openssl' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: openssl
Product: Fedora 22
Version: 1.0.1k
Release: 11.fc22
URL: https://www.openssl.org:443/
Summary: Utilities from the general purpose cryptography library with TLS implementation

Topics%20covered

Topics Covered

security advisory high severity Fedora security fix OpenSSL certificate forgery

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.