Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 522
Alerts This Week
Warning Icon 1 522

Fedora 23: 2016-97454404fe Moderate: OpenSSL Critical Memory Issues

fedora
Calendar Grey October 11, 2016
Dist Fedora Esm H88
CentOS 8 presents a new kernel update resolving several vulnerabilities with high-priority patches.
Update from upstream with multiple security issues fixed.

Summary

The OpenSSL toolkit provides support for secure communications between

machines. OpenSSL includes a certificate management tool and shared

libraries which provide various cryptographic algorithms and

protocols.

Update Information:

Update from upstream with multiple security issues fixed.

Topics%20covered

Topics Covered

security advisory critical issue security update fedora software patch memory management openssl

Change Log

References


[ 1 ] Bug #1377600 - CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth https://bugzilla.redhat.com/show_bug.cgi?id=1377600 [ 2 ] Bug #1377594 - CVE-2016-6306 openssl: certificate message OOB reads https://bugzilla.redhat.com/show_bug.cgi?id=1377594 [ 3 ] Bug #1369855 - CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks https://bugzilla.redhat.com/show_bug.cgi?id=1369855 [ 4 ] Bug #1369504 - CVE-2016-2179 openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer https://bugzilla.redhat.com/show_bug.cgi?id=1369504 [ 5 ] Bug #1369113 - CVE-2016-2181 openssl: DTLS replay protection bypass allows DoS against DTLS connection https://bugzilla.redhat.com/show_bug.cgi?id=1369113 [ 6 ] Bug #1367340 - CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() https://bugzilla.redhat.com/show_bug.cgi?id=1367340 [ 7 ] Bug #1359615 ...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update openssl' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: openssl
Product: Fedora 23
Version: 1.0.2j
Release: 1.fc23
URL: https://www.openssl.org:443/
Summary: Utilities from the general purpose cryptography library with TLS implementation

Topics%20covered

Topics Covered

security advisory critical issue security update fedora software patch memory management openssl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.