Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. Policy processing is disabled by default but can be enabled by passing the -policy' argument to the command line utilities or by calling the
X509VERIFYPARAMset1policies()' function.
{ "ubuntu_priority": "low", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "libcrypto1.0.0-udeb", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "libcrypto1.0.0-udeb-dbgsym", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "libssl-dev", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "libssl-dev-dbgsym", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "libssl-doc", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "libssl1.0.0", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "libssl1.0.0-dbg", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "libssl1.0.0-dbgsym", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "libssl1.0.0-udeb", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "libssl1.0.0-udeb-dbgsym", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "openssl", "binary_version": "1.0.1f-1ubuntu2.27+esm7" }, { "binary_name": "openssl-dbgsym", "binary_version": "1.0.1f-1ubuntu2.27+esm7" } ] }
{ "ubuntu_priority": "low", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "libcrypto1.0.0-udeb", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "libcrypto1.0.0-udeb-dbgsym", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "libssl-dev", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "libssl-dev-dbgsym", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "libssl-doc", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "libssl1.0.0", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "libssl1.0.0-dbg", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "libssl1.0.0-dbgsym", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "libssl1.0.0-udeb", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "libssl1.0.0-udeb-dbgsym", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "openssl", "binary_version": "1.0.2g-1ubuntu4.20+esm7" }, { "binary_name": "openssl-dbgsym", "binary_version": "1.0.2g-1ubuntu4.20+esm7" } ] }
{ "ubuntu_priority": "low", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "libcrypto1.0.0-udeb", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libcrypto1.0.0-udeb-dbgsym", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl-dev", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl-dev-dbgsym", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl-doc", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl1.0.0", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl1.0.0-dbg", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl1.0.0-dbgsym", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl1.0.0-hmac", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl1.0.0-hmac-dbgsym", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl1.0.0-udeb", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "libssl1.0.0-udeb-dbgsym", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "openssl", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" }, { "binary_name": "openssl-dbgsym", "binary_version": "1.0.2g-1ubuntu4.fips.4.20.7" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libcrypto1.1-udeb", "binary_version": "1.1.1-1ubuntu2.1~18.04.22" }, { "binary_name": "libssl-dev", "binary_version": "1.1.1-1ubuntu2.1~18.04.22" }, { "binary_name": "libssl-doc", "binary_version": "1.1.1-1ubuntu2.1~18.04.22" }, { "binary_name": "libssl1.1", "binary_version": "1.1.1-1ubuntu2.1~18.04.22" }, { "binary_name": "libssl1.1-dbgsym", "binary_version": "1.1.1-1ubuntu2.1~18.04.22" }, { "binary_name": "libssl1.1-udeb", "binary_version": "1.1.1-1ubuntu2.1~18.04.22" }, { "binary_name": "openssl", "binary_version": "1.1.1-1ubuntu2.1~18.04.22" }, { "binary_name": "openssl-dbgsym", "binary_version": "1.1.1-1ubuntu2.1~18.04.22" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libcrypto1.0.0-udeb", "binary_version": "1.0.2n-1ubuntu5.12" }, { "binary_name": "libssl1.0-dev", "binary_version": "1.0.2n-1ubuntu5.12" }, { "binary_name": "libssl1.0.0", "binary_version": "1.0.2n-1ubuntu5.12" }, { "binary_name": "libssl1.0.0-dbgsym", "binary_version": "1.0.2n-1ubuntu5.12" }, { "binary_name": "libssl1.0.0-udeb", "binary_version": "1.0.2n-1ubuntu5.12" }, { "binary_name": "openssl1.0", "binary_version": "1.0.2n-1ubuntu5.12" }, { "binary_name": "openssl1.0-dbgsym", "binary_version": "1.0.2n-1ubuntu5.12" } ] }
{ "ubuntu_priority": "low", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "libcrypto1.1-udeb", "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.22" }, { "binary_name": "libssl-dev", "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.22" }, { "binary_name": "libssl-doc", "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.22" }, { "binary_name": "libssl1.1", "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.22" }, { "binary_name": "libssl1.1-dbgsym", "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.22" }, { "binary_name": "libssl1.1-hmac", "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.22" }, { "binary_name": "libssl1.1-udeb", "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.22" }, { "binary_name": "openssl", "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.22" }, { "binary_name": "openssl-dbgsym", "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.22" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libcrypto1.1-udeb", "binary_version": "1.1.1f-1ubuntu2.18" }, { "binary_name": "libssl-dev", "binary_version": "1.1.1f-1ubuntu2.18" }, { "binary_name": "libssl-doc", "binary_version": "1.1.1f-1ubuntu2.18" }, { "binary_name": "libssl1.1", "binary_version": "1.1.1f-1ubuntu2.18" }, { "binary_name": "libssl1.1-dbgsym", "binary_version": "1.1.1f-1ubuntu2.18" }, { "binary_name": "libssl1.1-udeb", "binary_version": "1.1.1f-1ubuntu2.18" }, { "binary_name": "openssl", "binary_version": "1.1.1f-1ubuntu2.18" }, { "binary_name": "openssl-dbgsym", "binary_version": "1.1.1f-1ubuntu2.18" } ] }
{ "ubuntu_priority": "low", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "libcrypto1.1-udeb", "binary_version": "1.1.1f-1ubuntu2.fips.18" }, { "binary_name": "libssl-dev", "binary_version": "1.1.1f-1ubuntu2.fips.18" }, { "binary_name": "libssl-doc", "binary_version": "1.1.1f-1ubuntu2.fips.18" }, { "binary_name": "libssl1.1", "binary_version": "1.1.1f-1ubuntu2.fips.18" }, { "binary_name": "libssl1.1-dbgsym", "binary_version": "1.1.1f-1ubuntu2.fips.18" }, { "binary_name": "libssl1.1-hmac", "binary_version": "1.1.1f-1ubuntu2.fips.18" }, { "binary_name": "libssl1.1-udeb", "binary_version": "1.1.1f-1ubuntu2.fips.18" }, { "binary_name": "openssl", "binary_version": "1.1.1f-1ubuntu2.fips.18" }, { "binary_name": "openssl-dbgsym", "binary_version": "1.1.1f-1ubuntu2.fips.18" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "libssl-dev", "binary_version": "3.0.2-0ubuntu1.9" }, { "binary_name": "libssl-doc", "binary_version": "3.0.2-0ubuntu1.9" }, { "binary_name": "libssl3", "binary_version": "3.0.2-0ubuntu1.9" }, { "binary_name": "libssl3-dbgsym", "binary_version": "3.0.2-0ubuntu1.9" }, { "binary_name": "openssl", "binary_version": "3.0.2-0ubuntu1.9" }, { "binary_name": "openssl-dbgsym", "binary_version": "3.0.2-0ubuntu1.9" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "efi-shell-aa64", "binary_version": "2023.11-5" }, { "binary_name": "efi-shell-arm", "binary_version": "2023.11-5" }, { "binary_name": "efi-shell-ia32", "binary_version": "2023.11-5" }, { "binary_name": "efi-shell-riscv64", "binary_version": "2023.11-5" }, { "binary_name": "efi-shell-x64", "binary_version": "2023.11-5" }, { "binary_name": "ovmf", "binary_version": "2023.11-5" }, { "binary_name": "ovmf-ia32", "binary_version": "2023.11-5" }, { "binary_name": "qemu-efi-aarch64", "binary_version": "2023.11-5" }, { "binary_name": "qemu-efi-arm", "binary_version": "2023.11-5" }, { "binary_name": "qemu-efi-riscv64", "binary_version": "2023.11-5" } ] }