{"action":"created","issue":{"url":"https://api.github.com/repos/docker-library/official-images/issues/1235","labels_url":"https://api.github.com/repos/docker-library/official-images/issues/1235/labels{/name}","comments_url":"https://api.github.com/repos/docker-library/official-images/issues/1235/comments","events_url":"https://api.github.com/repos/docker-library/official-images/issues/1235/events","html_url":"https://github.com/docker-library/official-images/issues/1235","id":120217221,"number":1235,"title":"openssl: CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196","user":{"login":"tianon","id":161631,"avatar_url":"https://avatars.githubusercontent.com/u/161631?v=3","gravatar_id":"","url":"https://api.github.com/users/tianon","html_url":"https://github.com/tianon","followers_url":"https://api.github.com/users/tianon/followers","following_url":"https://api.github.com/users/tianon/following{/other_user}","gists_url":"https://api.github.com/users/tianon/gists{/gist_id}","starred_url":"https://api.github.com/users/tianon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tianon/subscriptions","organizations_url":"https://api.github.com/users/tianon/orgs","repos_url":"https://api.github.com/users/tianon/repos","events_url":"https://api.github.com/users/tianon/events{/privacy}","received_events_url":"https://api.github.com/users/tianon/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker-library/official-images/labels/cve-tracker","name":"cve-tracker","color":"e11d21"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-12-03T16:41:45Z","updated_at":"2015-12-08T18:24:19Z","closed_at":null,"body":"CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, *CVE-2015-1794*\r\n\r\nhttps://mta.openssl.org/pipermail/openssl-announce/2015-December/000050.html\r\nhttps://mta.openssl.org/pipermail/openssl-announce/2015-December/000055.html\r\n\r\n- [ ] `alpine`: `libssl1.0-1.0.2d-r0` -- **update needed**\r\n  - http://bugs.alpinelinux.org/issues/4921\r\n  - http://bugs.alpinelinux.org/projects/alpine/search?q=CVE-2015-3193\r\n  - http://bugs.alpinelinux.org/projects/alpine/search?q=CVE-2015-3194\r\n  - http://bugs.alpinelinux.org/projects/alpine/search?q=CVE-2015-3195\r\n  - http://bugs.alpinelinux.org/projects/alpine/search?q=CVE-2015-3196\r\n  - http://bugs.alpinelinux.org/projects/alpine/search?q=CVE-2015-1794\r\n- [x] `busybox`: *not affected*\r\n- [ ] `centos` (RHEL derivative): `openssl-libs-1.0.1e-42.el7.9.x86_64` -- **update needed**\r\n  - https://access.redhat.com/security/cve/CVE-2015-3193\r\n  - https://access.redhat.com/security/cve/CVE-2015-3194\r\n  - https://access.redhat.com/security/cve/CVE-2015-3195\r\n  - https://access.redhat.com/security/cve/CVE-2015-3196\r\n  - https://access.redhat.com/security/cve/CVE-2015-1794\r\n- [ ] `crux`: `OpenSSL 1.0.2d` -- **update needed**\r\n  - https://crux.nu/gitweb/?p=ports/core.git;a=history;f=openssl;hb=HEAD\r\n- [x] `debian`: https://github.com/docker-library/official-images/pull/1241 -- no SSL in the base image, but many descendants\r\n  - https://security-tracker.debian.org/tracker/CVE-2015-3193\r\n  - https://security-tracker.debian.org/tracker/CVE-2015-3194\r\n  - https://security-tracker.debian.org/tracker/CVE-2015-3195\r\n  - https://security-tracker.debian.org/tracker/CVE-2015-3196\r\n  - https://security-tracker.debian.org/tracker/CVE-2015-1794\r\n- [ ] `fedora`: `openssl-libs-1.0.2d-3.fc23.x86_64` -- **update needed**\r\n  - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3193\r\n  - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3194\r\n  - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3195\r\n  - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3196\r\n  - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-1794\r\n- [ ] `mageia`: `lib64openssl1.0.0-1.0.2d-1.mga5` -- **update needed**\r\n  - https://bugs.mageia.org/buglist.cgi?quicksearch=ALL%20CVE-2015-3193\r\n  - https://bugs.mageia.org/buglist.cgi?quicksearch=ALL%20CVE-2015-3194\r\n  - https://bugs.mageia.org/buglist.cgi?quicksearch=ALL%20CVE-2015-3195\r\n  - https://bugs.mageia.org/buglist.cgi?quicksearch=ALL%20CVE-2015-3196\r\n  - https://bugs.mageia.org/buglist.cgi?quicksearch=ALL%20CVE-2015-1794\r\n- [ ] `opensuse`: `openssl-1.0.1i-4.1.x86_64`/`libopenssl1_0_0-1.0.1i-4.1.x86_64` -- **update needed**\r\n  - https://bugzilla.novell.com/show_bug.cgi?id=CVE-2015-3193\r\n  - https://bugzilla.novell.com/show_bug.cgi?id=CVE-2015-3194\r\n  - https://bugzilla.novell.com/show_bug.cgi?id=CVE-2015-3195\r\n  - https://bugzilla.novell.com/show_bug.cgi?id=CVE-2015-3196\r\n  - https://bugzilla.novell.com/show_bug.cgi?id=CVE-2015-1794\r\n- [ ] `oraclelinux`: `openssl-libs-1.0.1e-42.el7_1.9.x86_64` -- **update needed**\r\n  - http://linux.oracle.com/cve/CVE-2015-3193.html\r\n  - http://linux.oracle.com/cve/CVE-2015-3194.html\r\n  - http://linux.oracle.com/cve/CVE-2015-3195.html\r\n  - http://linux.oracle.com/cve/CVE-2015-3196.html\r\n  - http://linux.oracle.com/cve/CVE-2015-1794.html\r\n- [ ] `sourcemage`: `OpenSSL 0.9.8zd` -- **update needed**\r\n  - http://www.sourcemage.org/projects/grimoire/search?scope=all&q=CVE-2015-3193\r\n  - http://www.sourcemage.org/projects/grimoire/search?scope=all&q=CVE-2015-3194\r\n  - http://www.sourcemage.org/projects/grimoire/search?scope=all&q=CVE-2015-3195\r\n  - http://www.sourcemage.org/projects/grimoire/search?scope=all&q=CVE-2015-3196\r\n  - http://www.sourcemage.org/projects/grimoire/search?scope=all&q=CVE-2015-1794\r\n- [ ] `ubuntu`: https://github.com/docker-library/official-images/pull/1251 -- `libssl1.0.0_1.0.1f-1ubuntu2.15`\r\n  - http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-3193.html\r\n  - http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-3194.html\r\n  - http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-3195.html\r\n  - http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-3196.html\r\n  - http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1794.html"},"comment":{"url":"https://api.github.com/repos/docker-library/official-images/issues/comments/162968896","html_url":"https://github.com/docker-library/official-images/issues/1235#issuecomment-162968896","issue_url":"https://api.github.com/repos/docker-library/official-images/issues/1235","id":162968896,"user":{"login":"tianon","id":161631,"avatar_url":"https://avatars.githubusercontent.com/u/161631?v=3","gravatar_id":"","url":"https://api.github.com/users/tianon","html_url":"https://github.com/tianon","followers_url":"https://api.github.com/users/tianon/followers","following_url":"https://api.github.com/users/tianon/following{/other_user}","gists_url":"https://api.github.com/users/tianon/gists{/gist_id}","starred_url":"https://api.github.com/users/tianon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tianon/subscriptions","organizations_url":"https://api.github.com/users/tianon/orgs","repos_url":"https://api.github.com/users/tianon/repos","events_url":"https://api.github.com/users/tianon/events{/privacy}","received_events_url":"https://api.github.com/users/tianon/received_events","type":"User","site_admin":false},"created_at":"2015-12-08T18:24:18Z","updated_at":"2015-12-08T18:24:18Z","body":"@vaygr looks like sourcemage hasn't been updated yet (http://www.sourcemage.org/projects/grimoire/repository/changes/crypto/openssl?rev=master); am I looking in the right places for this kind of information?"}}