ALT-PU-2017-1557: package LibreSSL update to version 2.5.4-alt1
Источник
errata.altlinux.org
Дата публикации
03.05.2017
Дата обновления
03.05.2017
Устраненные уязвимости
1
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container
Описание
This update upgrades LibreSSL to version 2.5.4-alt1.
Устраненные уязвимости1
Связанные уязвимости
CVSS3: 5.3
nvd
больше 9 лет назад
LibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_verify_result is relied upon for a later check of a verification result, in a use case where a user-provided verification callback returns 1, as demonstrated by acceptance of invalid certificates by nginx.
CVSS3: 5.3
debian
больше 9 лет назад
LibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_ ...
CVSS3: 5.3
github
больше 4 лет назад
LibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_verify_result is relied upon for a later check of a verification result, in a use case where a user-provided verification callback returns 1, as demonstrated by acceptance of invalid certificates by nginx.