Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 486
Alerts This Week
Warning Icon 1 486

Fedora 25 OpenSSL Update 2016-64e0743e16 Moderate Memory Growth DoS

fedora
Calendar Grey October 9, 2016
Dist Fedora Esm H88
Numerous vulnerabilities addressed in the OpenSSL utility, such as memory leaks and possible DoS risks in Fedora 25.
Update from upstream with multiple security issues fixed.

Summary

The OpenSSL toolkit provides support for secure communications between

machines. OpenSSL includes a certificate management tool and shared

libraries which provide various cryptographic algorithms and

protocols.

Update Information:

Update from upstream with multiple security issues fixed.

Topics%20covered

Topics Covered

security advisory fedora update DoS security fix openssl memory growth

Change Log

References


[ 1 ] Bug #1377600 - CVE-2016-6304 openssl: OCSP Status Request extension unbounded memory growth https://bugzilla.redhat.com/show_bug.cgi?id=1377600 [ 2 ] Bug #1377594 - CVE-2016-6306 openssl: certificate message OOB reads https://bugzilla.redhat.com/show_bug.cgi?id=1377594 [ 3 ] Bug #1369855 - CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks https://bugzilla.redhat.com/show_bug.cgi?id=1369855 [ 4 ] Bug #1369504 - CVE-2016-2179 openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer https://bugzilla.redhat.com/show_bug.cgi?id=1369504 [ 5 ] Bug #1369113 - CVE-2016-2181 openssl: DTLS replay protection bypass allows DoS against DTLS connection https://bugzilla.redhat.com/show_bug.cgi?id=1369113 [ 6 ] Bug #1367340 - CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() https://bugzilla.redhat.com/show_bug.cgi?id=1367340 [ 7 ] Bug #1359615 ...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update openssl' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: openssl
Product: Fedora 25
Version: 1.0.2j
Release: 1.fc25
URL: https://www.openssl.org:443/
Summary: Utilities from the general purpose cryptography library with TLS implementation

Topics%20covered

Topics Covered

security advisory fedora update DoS security fix openssl memory growth

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.