Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Fedora 24 SSCG Update: FEDORA-2017-712ffce24d Critical Race Condition

fedora
Calendar Grey March 31, 2017
Scroller Fedora
New patch for Fedora 24 resolves a race-condition issue in the sscg tool related to secure certificates management. Apply the update using dnf upgrade.
Addresses a potential race-condition when the key and certificate share the same file.

Summary

A utility to aid in the creation of more secure "self-signed"

certificates. The certificates created by this tool are generated in a

way so as to create a CA certificate that can be safely imported into a

client machine to trust the service certificate without needing to set

up a full PKI environment and without exposing the machine to a risk of

false signatures from the service certificate.

Update Information:

Addresses a potential race-condition when the key and certificate share the same file.

Topics%20covered

Topics Covered

security advisory critical Fedora race condition sscg

Change Log

References

Fedora Update Notification FEDORA-2017-712ffce24d 2017-03-31 18:31:56.910071
Name : sscg Product : Fedora 24 Version : 2.0.4 Release : 1.fc24 URL : https://github.com/sgallagher/sscg Summary : Simple SSL certificate generator Description : A utility to aid in the creation of more secure "self-signed" certificates. The certificates created by this tool are generated in a way so as to create a CA certificate that can be safely imported into a client machine to trust the service certificate without needing to set up a full PKI environment and without exposing the machine to a risk of false signatures from the service certificate.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade sscg' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: sscg
Product: Fedora 24
Version: 2.0.4
Release: 1.fc24
URL: https://github.com/sgallagher/sscg
Summary: Simple SSL certificate generator

Topics%20covered

Topics Covered

security advisory critical Fedora race condition sscg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.