Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:0478-1

Опубликовано: 16 фев. 2016
Источник: suse-cvrf

Описание

Security update for socat

This update for socat fixes the following issues:

Changes in socat:

  • update to 1.7.3.1, security fixes:

    • Socat security advisory 7 and MSVR-1499: 'Bad DH p parameter in OpenSSL' (boo#938913 and CVE-2015-4000).
    • Socat security advisory 8: 'Stack overflow in arguments parser' (boo#964844)

  • Update to version 1.7.3.0

    • Too many changes to list; please read the CHANGES file for news

Список пакетов

openSUSE Leap 42.1
socat-1.7.3.1-6.1

Ссылки

Описание

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.

Затронутые продукты
openSUSE Leap 42.1:socat-1.7.3.1-6.1
Ссылки