LINUX: SSL / OpenSSL Certs Default Location On Oracle Linux

 "/etc/ssl/certs" is the default location where SSL / OpenSSL certs are stored on Oracle Linux Operating system

Read more "LINUX: SSL / OpenSSL Certs Default Location On Oracle Linux"

ORACLE LINUX: Documentation Link For Searching CVE/Vulnerability Details on Oracle Linux (OL) OS

Below is Oracle Linux Documentation Link for Searching CVE/Vulnerability details on Oracle Linux OS.

https://linux.oracle.com/pls/apex/f?p=130:21

Read more "ORACLE LINUX: Documentation Link For Searching CVE/Vulnerability Details on Oracle Linux (OL) OS"

LINUX: How To Check List of Security Vulnerabilities (CVE) Fixes In Particular RPM Package On Linux? ("rpm" command)

Below command can be used to check of list of security vulnerability fixes (CVE fixes) in particular rpm package version on Linux.

rpm -q --changelog <rpm package name> | grep -i cve

Below is example snippet of above command which lists vulnerability fixes on openssl rpm package.

# rpm -q --changelog openssl | grep -i cve
- fix CVE-2018-5407 - EC signature local timing side-channel key extraction
- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure
- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus
- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication

Products to which Article Applies

All Linux Environments

Additional References

https://www.centos.org/forums/viewtopic.php?t=51443

Read more "LINUX: How To Check List of Security Vulnerabilities (CVE) Fixes In Particular RPM Package On Linux? ("rpm" command)"