Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

upgrade to OpenSSL 1.0.2j #1436

Merged
merged 2 commits into from Sep 27, 2016
Merged

Commits on Sep 22, 2016

  1. upgrade to OpenSSL 1.0.2i

    Updates omnibus-software (and therefore omnibus) to know about new
    version of OpenSSL.
    
    * OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
    
    * SSL_peek() hang on empty record (CVE-2016-6305)
    
    * SWEET32 Mitigation (CVE-2016-2183)
    * OOB write in MDC2_Update() (CVE-2016-6303)
    * Malformed SHA512 ticket DoS (CVE-2016-6302)
    * OOB write in BN_bn2dec() (CVE-2016-2182)
    * OOB read in TS_OBJ_print_bio() (CVE-2016-2180)
    * Pointer arithmetic undefined behaviour (CVE-2016-2177)
    * Constant time flag not preserved in DSA signing (CVE-2016-2178)
    * DTLS buffered message DoS (CVE-2016-2179)
    * DTLS replay protection DoS (CVE-2016-2181)
    * Certificate message OOB reads (CVE-2016-6306)
    * Excessive allocation of memory in tls_get_message_header() (CVE-2016-6307)
    * Excessive allocation of memory in dtls1_preprocess_fragment() (CVE-2016-6308)
    
    https://www.openssl.org/news/secadv/20160922.txt
    
    Signed-off-by: Robb Kidd <rkidd@chef.io>
    robbkidd committed Sep 22, 2016
    Copy the full SHA
    b1e8544 View commit details
    Browse the repository at this point in the history

Commits on Sep 27, 2016

  1. upgrade to OpenSSL 1.0.2j

    Update omnibus-software for latest OpenSSL
    
    Severity: Moderate
    
    * Missing CRL sanity check (CVE-2016-7052)
    
    Signed-off-by: Robb Kidd <rkidd@chef.io>
    robbkidd committed Sep 27, 2016
    Copy the full SHA
    185c3fb View commit details
    Browse the repository at this point in the history