diff options
| author | Adrien Nader <adrien@notk.org> | 2015-07-09 21:41:13 +0200 |
|---|---|---|
| committer | Adrien Nader <adrien@notk.org> | 2015-07-09 21:41:13 +0200 |
| commit | 6d0d05093994de947eae2309e3d060cbbc9f71d0 (patch) | |
| tree | bb02ebc38747ab324737bbc1a329591ce802c90b /slackware64-current/source/n | |
| parent | 24c3e65ea1a901d50920637a96180aab72a9984a (diff) | |
Thu Jul 9 18:29:23 UTC 2015
a/kernel-firmware-20150709git-noarch-1.txz: Upgraded.
a/openssl-solibs-1.0.1p-x86_64-1.txz: Upgraded.
n/openssl-1.0.1p-x86_64-1.txz: Upgraded.
This update fixes the following security issue:
Alternative chains certificate forgery (CVE-2015-1793).
During certificate verification, OpenSSL (starting from version 1.0.1n and
1.0.2b) will attempt to find an alternative certificate chain if the first
attempt to build such a chain fails. An error in the implementation of this
logic can mean that an attacker could cause certain checks on untrusted
certificates to be bypassed, such as the CA flag, enabling them to use a
valid leaf certificate to act as a CA and "issue" an invalid certificate.
This issue will impact any application that verifies certificates including
SSL/TLS/DTLS clients and SSL/TLS/DTLS servers using client authentication.
This issue affects OpenSSL versions 1.0.2c, 1.0.2b, 1.0.1n and 1.0.1o.
This issue was reported to OpenSSL on 24th June 2015 by Adam Langley/David
Benjamin (Google/BoringSSL). The fix was developed by the BoringSSL project.
For more information, see:
https://openssl.org/news/secadv_20150709.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1793
(* Security fix *)
Diffstat (limited to 'slackware64-current/source/n')
4 files changed, 2 insertions, 2 deletions
diff --git a/slackware64-current/source/n/openssl/openssl-1.0.1o.tar.gz b/slackware64-current/source/n/openssl/openssl-1.0.1o.tar.gz deleted file mode 100644 index 042f3fc62..000000000 --- a/slackware64-current/source/n/openssl/openssl-1.0.1o.tar.gz +++ /dev/null @@ -1 +0,0 @@ -b003e3382607ef2c6d85b51e4ed7a4c0a76b8d5a diff --git a/slackware64-current/source/n/openssl/openssl-1.0.1o.tar.gz.asc b/slackware64-current/source/n/openssl/openssl-1.0.1o.tar.gz.asc deleted file mode 100644 index 7d187f225..000000000 --- a/slackware64-current/source/n/openssl/openssl-1.0.1o.tar.gz.asc +++ /dev/null @@ -1 +0,0 @@ -4059228bae86a20cd6a986361485eb59fcd29129 diff --git a/slackware64-current/source/n/openssl/openssl-1.0.1p.tar.gz b/slackware64-current/source/n/openssl/openssl-1.0.1p.tar.gz new file mode 100644 index 000000000..1df1e2595 --- /dev/null +++ b/slackware64-current/source/n/openssl/openssl-1.0.1p.tar.gz @@ -0,0 +1 @@ +9d1977cc89242cd11471269ece2ed4650947c046 diff --git a/slackware64-current/source/n/openssl/openssl-1.0.1p.tar.gz.asc b/slackware64-current/source/n/openssl/openssl-1.0.1p.tar.gz.asc new file mode 100644 index 000000000..e01ec967c --- /dev/null +++ b/slackware64-current/source/n/openssl/openssl-1.0.1p.tar.gz.asc @@ -0,0 +1 @@ +6a5e98c407a6f35631b341a3dbe122d1c17fcbf3 |