Описание
ELSA-2007-0964: Important: openssl security update (IMPORTANT)
[0.9.8b-8.3.2]
- more DTLS fixes (#321211)
[0.9.8b-8.3.1]
- fix CVE-2007-3108 - side channel attack on private keys (#322891)
- fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309871)
- fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321211)
Обновленные пакеты
Oracle Linux 5
Oracle Linux x86_64
openssl
0.9.8b-8.3.el5_0.2
openssl-devel
0.9.8b-8.3.el5_0.2
openssl-perl
0.9.8b-8.3.el5_0.2
Oracle Linux i386
openssl
0.9.8b-8.3.el5_0.2
openssl-devel
0.9.8b-8.3.el5_0.2
openssl-perl
0.9.8b-8.3.el5_0.2
Связанные CVE
Связанные уязвимости
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9. ...