xCAT/xcat-core
2
0
Fork 0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-08-16 16:20:22 +00:00
Code Issues Releases Wiki Activity

Merge pull request #1713 from whowutwut/opensslvuln

Browse Source 
Provide Security Notice for Vulnerability created on 2016-08-15
This commit is contained in:
Victor Hu
2016-08-16 14:36:15 -04:00
committed by GitHub
parent 9298b5ff21 8abf2b0334
commit 8a87442887
2 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
docs/source/security/2016/20160815_openssl.rst Normal file
View File

@@ -0,0 +1,18 @@
2016-08-16 - OpenSSL Vulnerabilities
====================================
This vulnerability has no fix available at this time (other then mentioned patches below)
Issue: https://bugzilla.redhat.com/show_bug.cgi?id=1359615
Patch: https://github.com/openssl/openssl/commit/0ed26acce328ec16a3aa635f1ca37365e8c7403a
Advisory CVEs
-------------
`CVE-2016-2180 <https://exchange.xforce.ibmcloud.com/vulnerabilities/115829>`_ - OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds read in the TS_OBJ_print_bio function.
Action
------
xCAT uses OpenSSL for client-server communication but **does not** ship it. It is highly recommended to keep your OpenSSL levels up-to-date to prevent any potential security threats.

1
docs/source/security/2016/index.rst
View File

@@ -8,3 +8,4 @@
20160301_openssl.rst
20160128_openssl.rst
20160115_openssl.rst
20160815_openssl.rst