SCIENTIFIC-LINUX-USERS Archives

September 2006

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: openssl security update (-0.9.7a-43.11) ?
From:
"Takashi Ichihara (RIKEN)" <[log in to unmask]>
Reply To:
[log in to unmask]
Date:
Wed, 13 Sep 2006 11:00:20 +0900
Content-Type:
TEXT/PLAIN
Parts/Attachments:
TEXT/PLAIN (39 lines) 
> Takashi Ichihara (RIKEN) wrote:
> >   Hi
> > 
> >   During regular security audit in our laboratory today, we have pointed 
> > out recent security issues for openssl of SL4.3 (openssl-0.9.7a-43.8) for
> > i386 and X86_64 distributions.
> > 
> >   Openssl Improper PKCS Handling RSA Signature Forgery Vulnerability
> >   http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4339
> > 
> > This problem has been already fixed at upstream vendor by
> >   https://rhn.redhat.com/errata/RHSA-2006-0661.html
> > 
> >   We are looking forward to getting them ASAP at SL distributions.
> >  (openssl-0.9.7a-43.11.xxxx.rpm)
> > 
> > Thanks!
> > 
> > Takashi Ichihara (RIKEN)

Troy Dawson wrote: 
> Hi,
> It is up there now.  At least on the main mirror.
> 
> Troy
> 
> __________________________________________________
> Troy Dawson  [log in to unmask]  (630)840-6468
> Fermilab  ComputingDivision/CSS  CSI Group
> __________________________________________________

Hi, Troy

   Thanks.  All of the openssl packages of our Scientific Linux
nodes have been updated automatically by scheduled YUM update.
Thank you very much for the quick response.

Takashi Ichihara (RIKEN)

ATOM RSS1 RSS2