Summary: | dev-libs/openssl: out-of-bounds read creates crash | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Aleksandr Wagner (Kivak) <alwag> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED DUPLICATE | ||
Severity: | normal | CC: | base-system, libressl |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://bugzilla.novell.com/show_bug.cgi?id=1065363 | ||
Whiteboard: | A3 [ebuild] | ||
Package list: | Runtime testing required: | --- |
Description
Aleksandr Wagner (Kivak)
2017-10-27 14:55:52 UTC
updated on 08/21/2018 via commit fd5cf8ed re: Keywords for dev-libs/openssl: | a | | | m | | | d x | | | 6 8 | | | 4 6 | u | | a a a p s | | | n | | l m r i p h m s p f m f | e u s | r | p d a m a p c x p 6 3 a b i b | a s l | e | h 6 r 6 6 p 6 8 p 8 9 s r s p s | p e o | p | a 4 m 4 4 c 4 6 a k 0 h c d s d | i d t | o -----------------+---------------------------------+-----------+------- 0.9.8z_p8 | ~ + ~ o ~ ~ ~ + ~ ~ ~ ~ ~ o ~ ~ | 5 # 0.9.8 | gentoo 0.9.8z_p8-r1 | ~ + ~ o ~ ~ ~ + ~ ~ ~ ~ ~ o ~ ~ | 6 o | gentoo -----------------+---------------------------------+-----------+------- 1.0.2o-r3 | + + + + + + + + + + + + + ~ ~ ~ | 6 o 0 | gentoo 1.0.2o-r6 | ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ | 6 # | gentoo 1.0.2p | ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ | 6 o | gentoo -----------------+---------------------------------+-----------+------- [M]1.1.0i | ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ | 6 o 0/1.1 | gentoo [M]1.1.1_pre8 | o o o o o o o o o o o o o o o o | 6 # | gentoo [M]1.1.1_pre9 | o o o o o o o o o o o o o o o o | 6 o | gentoo Keywords for dev-libs/libressl: | a | | | m | | | d x | | | 6 8 | | | 4 6 | u | | a a a p s | | | n | | l m r i p h m s p f m f | e u s | r | p d a m a p c x p 6 3 a b i b | a s l | e | h 6 r 6 6 p 6 8 p 8 9 s r s p s | p e o | p | a 4 m 4 4 c 4 6 a k 0 h c d s d | i d t | o ---------+---------------------------------+----------+------- 2.6.4 | ~ + + ~ ~ + + + ~ o + o + o ~ o | 6 o 0/44 | gentoo 2.6.5 | ~ + + ~ ~ ~ ~ + ~ o + o + o ~ o | 6 o | gentoo ---------+---------------------------------+----------+------- [M]2.7.3 | ~ ~ ~ ~ ~ ~ ~ ~ ~ o o o ~ o ~ o | 6 # 0/45 | gentoo [M]2.7.4 | ~ ~ ~ ~ ~ ~ ~ ~ ~ o o o ~ o ~ o | 6 # | gentoo [M]2.8.0 | ~ ~ ~ ~ ~ ~ ~ ~ ~ o o o ~ o ~ o | 6 o | gentoo dev-libs/openssl: bump to v1.1.1 pre release 9 (beta) - openssl-1.0.2a-x32-asm.patch dropped which shouldn't be necessary anymore according to upstream [Link 1]. Link 1: https://rt.openssl.org/Ticket/Display.html?id=3759#txn-62605 Bug: https://bugs.gentoo.org/542618 Package-Manager: Portage-2.3.48, Repoman-2.3.10 Gentoo Security Padawan (domhnall) *** This bug has been marked as a duplicate of bug 581234 *** |