Gentoo 200902-02 Normal: OpenSSL Certificate Validation Error

Gentoo Linux Security Advisory GLSA 200902-02 https://security.gentoo.org/ Severity: Normal Title: OpenSSL: Certificate validation error Date: February 12, 2009 Bugs: #251346 ID: 200902-02

Synopsis ======= An error in the OpenSSL certificate chain validation might allow for spoofing attacks.
Background ========= OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) as well as a general purpose cryptography library.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-libs/openssl < 0.9.8j >= 0.9.8j
========== The Google Security Team reported that several functions incorrectly check the re...