FEDORA-2017-3451dbec48 — security update for openssl

stable

openssl-1.0.2k-1.fc25

FEDORA-2017-3451dbec48 created by tmraz 7 years ago for Fedora 25

Minor upstream release fixing CVE-2016-8610, CVE-2017-3731, CVE-2017-3732.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-3451dbec48

This update has been submitted for testing by tmraz.

7 years ago

This update has been pushed to testing.

7 years ago

dhgutteridge commented & provided feedback 7 years ago

karma

No regressions noted.

This update has been submitted for stable by bodhi.

7 years ago

flexo3001 commented & provided feedback 7 years ago

karma

Looks good to me.

jayjayjazz commented & provided feedback 7 years ago

karma

Works fine on x86_64.

fale commented & provided feedback 7 years ago

karma

wfm

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

openssl-1.0.2k-1.fc25

Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

BZ#1384743 CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS

BZ#1388725 CVE-2016-8610 openssl: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]

BZ#1416852 CVE-2017-3731 openssl: Truncated packet could crash via OOB read

BZ#1416856 CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64

BZ#1416864 CVE-2017-3731 CVE-2017-3732 openssl: various flaws [fedora-all]

openssl-1.0.2k-1.fc25

Automated Test Results

None