--------------------------------------------------------------------- Fedora Legacy Test Update Notification FEDORALEGACY-2005-152841 Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152841 2005-06-04 --------------------------------------------------------------------- Name : openssl Versions : rh73: openssl-0.9.6b-39.7.legacy Versions : rh9: openssl-0.9.7a-20.4.legacy Versions : fc1: openssl-0.9.7a-33.11.legacy Summary : The OpenSSL toolkit. Description : The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. --------------------------------------------------------------------- Update Information: Updated OpenSSL packages that fix security issues are now available. OpenSSL is a toolkit that implements Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. A flaw was found in the way the der_chop script creates temporary files. It is possible that a malicious local user could cause der_chop to overwrite files (CAN-2004-0975). Users are advised to update to these erratum packages which contain a patch to correct this issue. --------------------------------------------------------------------- Changelogs rh73: * Tue May 31 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 0.9.6b-39.7.legacy - Added missing zlib-devel BuildPrereq * Fri Mar 11 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 0.9.6b-38.7.legacy - Fixed the CAN-2004-0975 patch * Sat Mar 05 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 0.9.6b-37.7.legacy - add security fix for CAN-2004-0975 rh9: * Fri Mar 11 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 0.9.7a-20.4.legacy - Fixed the CAN-2004-0975 patch * Sat Mar 05 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 0.9.7a-20.3.legacy - Added patch for CAN-2004-0975 fc1: * Sat Mar 05 2005 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 0.9.7a-33.11.legacy - Added security patch for CAN-2004-0975 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedoralegacy.org/ (sha1sums) rh73: 23e338ea168362be064b0fc5818ca75fb0ff478d redhat/7.3/updates-testing/i386/openssl-0.9.6b-39.7.legacy.i386.rpm 909d19843a102c8db726f4ce19bec343e468c205 redhat/7.3/updates-testing/i386/openssl-0.9.6b-39.7.legacy.i686.rpm e5d2ded644fc5e6efd947ce85c6889e8f3d85cf9 redhat/7.3/updates-testing/i386/openssl-devel-0.9.6b-39.7.legacy.i386.rpm 94f5abf2da579c8546b26a579d125a402c517cd4 redhat/7.3/updates-testing/i386/openssl-perl-0.9.6b-39.7.legacy.i386.rpm 22e61ba5e83c0f2ffb1cf01c2f440e0f5778aeb5 redhat/7.3/updates-testing/SRPMS/openssl-0.9.6b-39.7.legacy.src.rpm rh9: fc4ccd852dbdb32d35feda73d57dfec9695bb124 redhat/9/updates-testing/i386/openssl-0.9.7a-20.4.legacy.i386.rpm 53d60e01f25892efcc5da5281110259f15560f95 redhat/9/updates-testing/i386/openssl-0.9.7a-20.4.legacy.i686.rpm 6044af703d7b8915a0ff64cd57862c09f202884b redhat/9/updates-testing/i386/openssl-devel-0.9.7a-20.4.legacy.i386.rpm 366b375b6e77103d41e2b3b1fbdf2e4fd11ff31c redhat/9/updates-testing/i386/openssl-perl-0.9.7a-20.4.legacy.i386.rpm 55334c3b4a44b6743d86d7a5e40ec2ac853cfca9 redhat/9/updates-testing/SRPMS/openssl-0.9.7a-20.4.legacy.src.rpm fc1: 76fa768ce6ead9d3a2fe5a4bafa7c78c7d73049c fedora/1/updates-testing/i386/openssl-0.9.7a-33.11.legacy.i386.rpm b0eadfbcbfe4b8306eff0d0d9fe1abc56e77633b fedora/1/updates-testing/i386/openssl-0.9.7a-33.11.legacy.i686.rpm 7b24ed7cdbd8c55dbe0f7c9234314383c1cb90ca fedora/1/updates-testing/i386/openssl-devel-0.9.7a-33.11.legacy.i386.rpm 196577ad1b00b1285a41c30d8e42cf2c22d4063a fedora/1/updates-testing/i386/openssl-perl-0.9.7a-33.11.legacy.i386.rpm adfbc1d2c8753ae170cc9badee8ed56f5f4cf5cb fedora/1/updates-testing/SRPMS/openssl-0.9.7a-33.11.legacy.src.rpm --------------------------------------------------------------------- Please test and comment in bugzilla.
Attachment:
signature.asc
Description: OpenPGP digital signature
-- fedora-legacy-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-legacy-list