CLD-451 Details
Other IDs this deficiency may be known by:
Basic Information:
Affected Package(s) |
openssl |
Deficiency Type |
SECURITY |
Date Created |
2018-07-05 09:37:47 |
Date Last Modified |
2018-08-16 11:00:42 |
Version Specific Information:
Cucumber 1.0 i686 | fixed in openssl-1.0.2p-i686-1 |
Cucumber 1.0 x86_64 | fixed in openssl-1.0.2p-x86_64-1 and openssl-lib_i686-1.0.2p-lib_i686-1 |
Cucumber 1.1 i686 |
fixed in openssl-1.0.2p-i686-1 |
Cucumber 1.1 x86_64 |
fixed in openssl-1.0.2p-x86_64-1 and openssl-lib_i686-1.0.2p-lib_i686-1 |
Details:
See https://www.openssl.org/news/secadv/20180612.txt
The OpenSSL developers have declared this issue to be "low severity," so we will
not be receiving a patch release until they make their next routine release.
LibreSSL on the other hand fixed this vulnerability on June 13, one day after it
went public, in LibreSSL version 2.7.4.