Bug 50350
| Summary: | openssl: Multiple issues (4.3) | ||
|---|---|---|---|
| Product: | UCS | Reporter: | Philipp Hahn <hahn> |
| Component: | Security updates | Assignee: | Quality Assurance <qa> |
| Status: | CLOSED FIXED | QA Contact: | Philipp Hahn <hahn> |
| Severity: | normal | ||
| Priority: | P3 | ||
| Version: | UCS 4.3 | ||
| Target Milestone: | UCS 4.3-4-errata | ||
| Hardware: | All | ||
| OS: | Linux | ||
| What kind of report is it?: | Security Issue | What type of bug is this?: | --- |
| Who will be affected by this bug?: | --- | How will those affected feel about the bug?: | --- |
| User Pain: | Enterprise Customer affected?: | ||
| School Customer affected?: | ISV affected?: | ||
| Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
| Ticket number: | Bug group (optional): | ||
| Max CVSS v3 score: | 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) | ||
|
Description
Philipp Hahn
--- mirror/ftp/4.3/unmaintained/component/4.3-4-errata/source/openssl_1.1.0k-1~deb9u1.dsc +++ apt/ucs_4.3-0-ucs4.3-5/source/openssl_1.1.0l-1~deb9u1.dsc @@ -1,5 +1,14 @@ -1.1.0k-1~deb9u1 [Wed, 26 Jun 2019 18:59:20 +0200] Sebastian Andrzej Siewior <sebastian@breakpoint.cc>: +1.1.0l-1~deb9u1 [Fri, 27 Sep 2019 21:46:29 +0200] Sebastian Andrzej Siewior <sebastian@breakpoint.cc>: + + * Import 1.1.0l + - CVE-2019-1547 (Compute ECC cofactors if not provided during EC_GROUP + construction). + - CVE-2019-1563 (Fixed a padding oracle in PKCS7_dataDecode and + CMS_decrypt_set1_pkey). + +1.1.0k-1~deb9u1 [Wed, 26 Jun 2019 19:41:14 +0200] Sebastian Andrzej Siewior <sebastian@breakpoint.cc>: * Import 1.1.0k - CVE-2019-1543 (Prevent over long nonces in ChaCha20-Poly1305) + * Perform the indep-install step with -j1 to avoid a race in the Makefile. <http://10.200.17.11/4.3-4/#6118916832769105863> OK: yaml OK: announce_errata OK: patch OK: piuparts [4.3-4] d9a08ea3c1 Bug #50350: openssl 1.1.0l-1~deb9u1 doc/errata/staging/openssl.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) [4.3-4] 2e48fbdf5a Bug #50350: openssl_1.1.0l-1~deb9u1 doc/errata/staging/openssl.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) |