Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 15013] New: openssl 0.9.8i needs update

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 15013] New: openssl 0.9.8i needs update
  • Date: 8 Jan 2009 13:16:31 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=15013

Summary: openssl 0.9.8i needs update
Product: Codex
Version: stable grimoire
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P3
Component: crypto
AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
ReportedBy: gsherwood AT sourcemage.org


According to http://www.openssl.org/news/secadv_20090107.txt:

Several functions inside OpenSSL incorrectly checked the result after
calling the EVP_VerifyFinal function, allowing a malformed signature
to be treated as a good signature rather than as an error. This issue
affected the signature checks on DSA and ECDSA keys used with
SSL/TLS.

Users of OpenSSL 0.9.8 should update to the OpenSSL 0.9.8j release
which contains a patch to correct this issue.


--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.




Archive powered by MHonArc 2.6.24.

Top of Page