Bug 448290 (CVE-2008-2420)
| Summary: | CVE-2008-2420 stunnel: incorrect CRL verification using OCSP protocol | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Tomas Hoger <thoger> | ||||
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||
| Status: | CLOSED ERRATA | QA Contact: | |||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | unspecified | CC: | mitr | ||||
| Target Milestone: | --- | Keywords: | Security | ||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| URL: | http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2420 | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2008-06-19 10:54:36 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Tomas Hoger
2008-05-25 13:49:22 UTC
This issue does not affect versions of stunnel as shipped in Red Hat Enterprise Linux 2.1, 3, 4 and 5. Support for OCSP protocol was only implemented in version 4.16, all Red Hat Enterprise Linux versions ship older stunnel versions, which do not support OCSP protocol. http://stunnel.mirt.net/ChangeLog_sdf.html Version 4.16, 2006.08.31, urgency: MEDIUM: * New features sponsored by Hewlett-Packard [ ... ] o OCSP support: ocsp = <URL> stunnel-4.24-0.fc7 has been submitted as an update for Fedora 7 stunnel-4.24-0.fc8 has been submitted as an update for Fedora 8 stunnel-4.24-1.fc9 has been submitted as an update for Fedora 9 stunnel-4.24-1.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report. stunnel-4.24-0.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report. stunnel-4.24-0.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report. Created attachment 307284 [details]
Error report when applying stunnel update
(In reply to comment #8) > Error report when applying stunnel update Raymond, if you believe your problem is really caused by stunnel update, please open a separate bug report against specific Fedora version with further details. Your screenshot does not provide enough information and there's no suggestion there that the problem is caused by stunnel. Thanks! |