• info
• discussion
• exploit
• solution
• references

OpenSSL Encoded ASN.1 Data Integer Truncation Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references for more information.


MandrakeSoft Enterprise Server 5

• Mandriva libopenssl0.9.8-0.9.8h-3.15mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libopenssl0.9.8-devel-0.9.8h-3.15mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libopenssl0.9.8-static-devel-0.9.8h-3.15mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva openssl-0.9.8h-3.15mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2011

• Mandriva libopenssl-devel-1.0.0d-2.5-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libopenssl-engines1.0.0-1.0.0d-2.5-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libopenssl-static-devel-1.0.0d-2.5-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libopenssl1.0.0-1.0.0d-2.5-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva openssl-1.0.0d-2.5-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/