FEDORA-2018-40dc8b8b16 — security update for openssl

stable

openssl-1.1.0h-1.fc26

FEDORA-2018-40dc8b8b16 created by tmraz 6 years ago for Fedora 26

Minor update to version 1.1.0h.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-40dc8b8b16

This update has been submitted for testing by tmraz.

6 years ago

This update has been pushed to testing.

6 years ago

filiperosset commented & provided feedback 6 years ago

karma

filiperosset commented & provided feedback 6 years ago

karma

no regressions noted*

samoht0 commented & provided feedback 6 years ago

karma

LGTM

This update has been submitted for batched by bodhi.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

openssl-1.1.0h-1.fc26

Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

BZ#1561260 CVE-2018-0733 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts

BZ#1561263 CVE-2018-0733 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts [fedora-all]

BZ#1561266 CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service

BZ#1561269 CVE-2018-0739 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service [fedora-all]

openssl-1.1.0h-1.fc26

Automated Test Results

passed