Bug 1337155 – CVE-2016-2106 openssl: EVP_EncryptUpdate overflow [jbews-2.1.0]

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1337155 - CVE-2016-2106 openssl: EVP_EncryptUpdate overflow [jbews-2.1.0]

Summary:	CVE-2016-2106 openssl: EVP_EncryptUpdate overflow [jbews-2.1.0]

Status:	CLOSED ERRATA

Aliases:	None

Product:	JBoss Enterprise Web Server 2
Classification:	JBoss
Component:	openssl (Show other bugs)
Sub Component:
Version:	2.1.0
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	DR03
Target Release:	2.1.1
Assigned To:	George Zaronikas
QA Contact:	Michal Karm Babacek
Docs Contact:

URL:
Whiteboard:	component:openssl
Keywords:	Security, SecurityTracking

Depends On:
Blocks:	CVE-2016-2106
	Show dependency tree / graph

Reported:	2016-05-18 08:03 EDT by Timothy Walsh
Modified:	2016-08-22 14:10 EDT (History)
CC List:	10 users (show)

See Also:
Fixed In Version:
Doc Type:	Release Note
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2016-08-22 14:10:03 EDT
Type:	Support Patch
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2016:1648	normal	SHIPPED_LIVE	Important: Red Hat JBoss Web Server 2.1.1 security update on RHEL 7	2016-08-22 18:07:56 EDT
Red Hat Product Errata	RHSA-2016:1649	normal	SHIPPED_LIVE	Important: Red Hat JBoss Web Server 2.1.1 security update on RHEL 6	2016-08-22 18:07:30 EDT
Red Hat Product Errata	RHSA-2016:1650	normal	SHIPPED_LIVE	Important: Red Hat JBoss Web Server 2.1.1 security update	2016-08-22 18:07:23 EDT

Groups: None (edit)

Description Timothy Walsh 2016-05-18 08:03:45 EDT

jbews-2.1.0 tracking bug for openssl: see blocks bug list for full details of the security issue(s).

This bug is never intended to be made public, please put any public notes
in the blocked bugs.

[bug automatically created by: add-tracking-bugs]

Comment 3 errata-xmlrpc 2016-08-22 14:10:03 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2016-1650.html

Note You need to log in before you can comment on or make changes to this bug.