SCIENTIFIC-LINUX-USERS Archives

September 2006

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
openssl security update (-0.9.7a-43.11) ?
From:
"Takashi Ichihara (RIKEN)" <[log in to unmask]>
Reply To:
[log in to unmask]
Date:
Tue, 12 Sep 2006 22:58:02 +0900
Content-Type:
TEXT/PLAIN
Parts/Attachments:
TEXT/PLAIN (19 lines) 
  Hi

  During regular security audit in our laboratory today, we have pointed 
out recent security issues for openssl of SL4.3 (openssl-0.9.7a-43.8) for
i386 and X86_64 distributions.

  Openssl Improper PKCS Handling RSA Signature Forgery Vulnerability
  http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4339

This problem has been already fixed at upstream vendor by
  https://rhn.redhat.com/errata/RHSA-2006-0661.html

  We are looking forward to getting them ASAP at SL distributions.
 (openssl-0.9.7a-43.11.xxxx.rpm)

Thanks!

Takashi Ichihara (RIKEN)

ATOM RSS1 RSS2