|
OpenSSL DER_CHOP Insecure Temporary File Creation Vulnerability
Solution: Red Hat has released advisory RHSA-2005:476-08 and fixes to address this issue on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information. Gentoo has released advisory GLSA 200411-15 and an updated eBuild to address this vulnerability and other issues. Users of the affected package are urged to execute the following commands with superuser privileges to install the update: emerge --sync emerge --ask --oneshot --verbose ">=dev-libs/openssl-0.9.7d-r2" Trustix Linux has released an advisory (TSL-2004-0050) along with fixes dealing with this issue. Please see the referenced advisory for more information. Ubuntu has released an advisory (USN-24-1) to address this issue. Please see the referenced advisory for more information. Debian has released advisory DSA 603-1 along with fixes dealing with this issue. Please see the referenced advisory for more information. MandrakeSoft has issued an advisory (MDKSA-2004:147) along with patched upgrades. Please see the referenced advisory for more information. Turbolinux has released advisory Turbolinux Security Announcement 31/Jan/2005 to address various issues. Please see the referenced advisory for more information. RedHat Fedora Linux has released advisory FEDORA-2005-389 addressing this issue for Fedora Core 3. Please see the referenced advisory for details on obtaining and applying the appropriate updates. SGI has released advisory 20050602-01-U to address this, and other issues for SGI Advanced Linux Environment 3, and SGI ProPack 3 Service Pack 5. Please see the referenced advisory for further information. Avaya has released advisory ASA-2005-170 detailing vulnerable Avaya products. Please see the referenced advisory for further information. OpenSSL Project OpenSSL 0.9.6 c
OpenSSL Project OpenSSL 0.9.6
OpenSSL Project OpenSSL 0.9.6 m
OpenSSL Project OpenSSL 0.9.6 i
OpenSSL Project OpenSSL 0.9.7 c
OpenSSL Project OpenSSL 0.9.7 d
|
|
 Privacy Statement |
