SSL certificate checking bypass in openssl

The OpenSSL certificate checking routines EVP_VerifyFinal can return negative values and 0 on failure. In some places negative values were not checked and considered successful verification. Prior to this update it was possible to bypass the certification chain checks of openssl.

Solution

There is no known workaround, please install the update packages.