OpenSSL Denial of Service Vulnerabilities

OpenSSL Denial of Service Vulnerabilities

Solution:

Please see the referenced advisories for more information.

Fixes are available:

Check Point Software FireWall-1 Next Generation FP1

Check Point Software R55 HFA-02 for IPSO
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=IPSO%203.7&patchlevel_selected=R55%20-%20H otfixes

Check Point Software R55 HFA-02 for Linux
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Linux&patchlevel_selected=R55%20-%20Hotfix es

Check Point Software R55 HFA-02 for SecurePlatform
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=SecurePlatform&patchlevel_selected=R55%20- %20Hotfixes

Check Point Software R55 HFA-02 for Solaris
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Solaris%202.8&patchlevel_selected=R55%20-% 20Hotfixes

Check Point Software R55 HFA-02 for Windows
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Windows%20NT&patchlevel_selected=R55%20-%2 0Hotfixes

Check Point Software FireWall-1 Next Generation FP2

Check Point Software R55 HFA-02 for IPSO
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=IPSO%203.7&patchlevel_selected=R55%20-%20H otfixes

Check Point Software R55 HFA-02 for Linux
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Linux&patchlevel_selected=R55%20-%20Hotfix es

Check Point Software R55 HFA-02 for SecurePlatform
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=SecurePlatform&patchlevel_selected=R55%20- %20Hotfixes

Check Point Software R55 HFA-02 for Solaris
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Solaris%202.8&patchlevel_selected=R55%20-% 20Hotfixes

Check Point Software R55 HFA-02 for Windows
R55 Hotfix HFA-02
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1&version_selected=NG%20with%20Application %20Intelligence&os_selected=Windows%20NT&patchlevel_selected=R55%20-%2 0Hotfixes

Check Point Software VPN-1 VSX NG with Application Intelligence

Check Point Software VPN-1/FireWall-1 VSX
VPN-1/FireWall-1 VSX NG with Application Intelligence
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=VPN-1/FireWall-1%20VSX&version_selected=VSX%20NG%20with%2 0Application%20Intelligence&os_selected=VSX%20NG%20with%20Application% 20Intelligence%20SingleCD&patchlevel_selected

OpenSSL Project OpenSSL 0.9.6 d

OpenSSL Project openssl-0.9.6m.tar.gz
http://www.openssl.org/source/openssl-0.9.6m.tar.gz

OpenSSL Project OpenSSL 0.9.6 i

Mandrake lib64openssl0.9.7-0.9.7b-4.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64:
http://www.mandrakesecure.net/en/ftp.php

Mandrake lib64openssl0.9.7-devel-0.9.7b-4.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64:
http://www.mandrakesecure.net/en/ftp.php

Mandrake lib64openssl0.9.7-static-devel-0.9.7b-4.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-0.9.6i-1.3.91mdk.i586.rpm
Mandrakelinux 9.1:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-0.9.6i-1.3.91mdk.ppc.rpm
Mandrakelinux 9.1/PPC:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-0.9.6i-1.6.M82mdk.i586.rpm
Multi Network Firewall 8.2:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-0.9.6i-1.7.90mdk.i586.rpm
Mandrakelinux 9.0:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-0.9.6i-1.7.C21mdk.i586.rpm
Corporate Server 2.1:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-0.9.6i-1.7.C21mdk.x86_64.rpm
Corporate Server 2.1/x86_64:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-devel-0.9.6i-1.7.90mdk.i586.rpm
Mandrakelinux 9.0:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-devel-0.9.6i-1.7.C21mdk.i586.rpm
Corporate Server 2.1:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-devel-0.9.6i-1.7.C21mdk.x86_64.rpm
Corporate Server 2.1/x86_64:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-static-devel-0.9.6i-1.7.90mdk.i586.rpm
Mandrakelinux 9.0:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-static-devel-0.9.6i-1.7.C21mdk.i586.rpm
Corporate Server 2.1:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0-static-devel-0.9.6i-1.7.C21mdk.x86_64.rpm
Corporate Server 2.1/x86_64:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0.9.7-0.9.7a-1.3.91mdk.i586.rpm
Mandrakelinux 9.1:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0.9.7-0.9.7a-1.3.91mdk.ppc.rpm
Mandrakelinux 9.1/PPC:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0.9.7-0.9.7b-4.2.92mdk.i586.rpm
Mandrakelinux 9.2:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0.9.7-devel-0.9.7a-1.3.91mdk.i586.rpm
Mandrakelinux 9.1:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0.9.7-devel-0.9.7a-1.3.91mdk.ppc.rpm
Mandrakelinux 9.1/PPC:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0.9.7-devel-0.9.7b-4.2.92mdk.i586.rpm
Mandrakelinux 9.2:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0.9.7-static-devel-0.9.7a-1.3.91mdk.i586.rpm
Mandrakelinux 9.1:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0.9.7-static-devel-0.9.7a-1.3.91mdk.ppc.rpm
Mandrakelinux 9.1/PPC:
http://www.mandrakesecure.net/en/ftp.php

Mandrake libopenssl0.9.7-static-devel-0.9.7b-4.2.92mdk.i586.rpm
Mandrakelinux 9.2:
http://www.mandrakesecure.net/en/ftp.php

Mandrake openssl-0.9.6i-1.6.M82mdk.i586.rpm
Multi Network Firewall 8.2:
http://www.mandrakesecure.net/en/ftp.php

Mandrake openssl-0.9.6i-1.7.90mdk.i586.rpm
Mandrakelinux 9.0:
http://www.mandrakesecure.net/en/ftp.php

Mandrake openssl-0.9.6i-1.7.C21mdk.i586.rpm
Corporate Server 2.1:
http://www.mandrakesecure.net/en/ftp.php

Mandrake openssl-0.9.6i-1.7.C21mdk.x86_64.rpm
Corporate Server 2.1/x86_64:
http://www.mandrakesecure.net/en/ftp.php

Mandrake openssl-0.9.7a-1.3.91mdk.i586.rpm
Mandrakelinux 9.1:
http://www.mandrakesecure.net/en/ftp.php

Mandrake openssl-0.9.7a-1.3.91mdk.ppc.rpm
Mandrakelinux 9.1/PPC:
http://www.mandrakesecure.net/en/ftp.php

Mandrake openssl-0.9.7b-4.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64:
http://www.mandrakesecure.net/en/ftp.php

Mandrake openssl-0.9.7b-4.2.92mdk.i586.rpm
Mandrakelinux 9.2:
http://www.mandrakesecure.net/en/ftp.php

OpenSSL Project openssl-0.9.6m.tar.gz
http://www.openssl.org/source/openssl-0.9.6m.tar.gz

SuSE openssl-0.9.6i-21.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/openssl-0.9.6i-21 .i586.patch.rpm

SuSE openssl-0.9.6i-21.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/openssl-0.9.6i-21 .i586.rpm

SuSE openssl-devel-0.9.6i-21.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/openssl-devel-0.9 .6i-21.i586.patch.rpm

SuSE openssl-devel-0.9.6i-21.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/openssl-devel-0.9 .6i-21.i586.rpm

OpenSSL Project OpenSSL 0.9.7 beta1

OpenSSL Project openssl-0.9.7d.tar.gz
http://www.openssl.org/source/openssl-0.9.7d.tar.gz

OpenSSL Project OpenSSL 0.9.7 a

Conectiva openssl-devel-0.9.7a-28910U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/openssl-devel-0.9.7a-28910U 90_2cl.i386.rpm

Conectiva openssl-devel-static-0.9.7a-28910U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/openssl-devel-static-0.9.7a -28910U90_2cl.i386.rpm

Conectiva openssl-doc-0.9.7a-28910U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/openssl-doc-0.9.7a-28910U90 _2cl.i386.rpm

Conectiva openssl-progs-0.9.7a-28910U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/openssl-progs-0.9.7a-28910U 90_2cl.i386.rpm

Conectiva openssl0.9.7-0.9.7a-28910U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/openssl0.9.7-0.9.7a-28910U9 0_2cl.i386.rpm

Fedora openssl-0.9.7a-33.10.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /openssl-0.9.7a-33.10.i386.rpm

Fedora openssl-0.9.7a-33.10.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /openssl-0.9.7a-33.10.i686.rpm

Fedora openssl-0.9.7a-33.10.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/x86_ 64/openssl-0.9.7a-33.10.x86_64.rpm

Fedora openssl-debuginfo-0.9.7a-33.10.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /debug/openssl-debuginfo-0.9.7a-33.10.i386.rpm

Fedora openssl-debuginfo-0.9.7a-33.10.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /debug/openssl-debuginfo-0.9.7a-33.10.i686.rpm

Fedora openssl-debuginfo-0.9.7a-33.10.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/x86_ 64/debug/openssl-debuginfo-0.9.7a-33.10.x86_64.rpm

Fedora openssl-devel-0.9.7a-33.10.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /openssl-devel-0.9.7a-33.10.i386.rpm

Fedora openssl-devel-0.9.7a-33.10.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/x86_ 64/openssl-devel-0.9.7a-33.10.x86_64.rpm

Fedora openssl-perl-0.9.7a-33.10.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386 /openssl-perl-0.9.7a-33.10.i386.rpm

Fedora openssl-perl-0.9.7a-33.10.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/x86_ 64/openssl-perl-0.9.7a-33.10.x86_64.rpm

Fedora Legacy openssl-0.9.7a-20.6.legacy.i386.rpm
Red Hat Linux 9:
http://download.fedoralegacy.org/redhat/9/updates/i386/openssl-0.9.7a- 20.6.legacy.i386.rpm

Fedora Legacy openssl-0.9.7a-33.13.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/openssl-0.9.7a- 33.13.legacy.i386.rpm

Fedora Legacy openssl-0.9.7a-35.2.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/openssl-0.9.7a- 35.2.legacy.i386.rpm

Fedora Legacy openssl-devel-0.9.7a-33.13.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/openssl-devel-0 .9.7a-33.13.legacy.i386.rpm

Fedora Legacy openssl-devel-0.9.7a-35.2.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/openssl-devel-0 .9.7a-35.2.legacy.i386.rpm

Fedora Legacy openssl-perl-0.9.7a-20.6.legacy.i386.rpm
Red Hat Linux 9:
http://download.fedoralegacy.org/redhat/9/updates/i386/openssl-perl-0. 9.7a-20.6.legacy.i386.rpm

Fedora Legacy openssl-perl-0.9.7a-35.2.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/openssl-perl-0. 9.7a-35.2.legacy.i386.rpm

Fedora Legacy openssl096-0.9.6-25.12.legacy.i386.rpm
Red Hat Linux 9:
http://download.fedoralegacy.org/redhat/9/updates/i386/openssl096-0.9. 6-25.12.legacy.i386.rpm

Fedora Legacy openssl096-0.9.6-26.3.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/openssl096-0.9. 6-26.3.legacy.i386.rpm

Fedora Legacy openssl096b-0.9.6b-15.3.legacy.i386.rpm
Red Hat Linux 9:
http://download.fedoralegacy.org/redhat/9/updates/i386/openssl096b-0.9 .6b-15.3.legacy.i386.rpm

Fedora Legacy openssl096b-0.9.6b-18.3.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/openssl096b-0.9 .6b-18.3.legacy.i386.rpm

OpenSSL Project openssl-0.9.7d.tar.gz
http://www.openssl.org/source/openssl-0.9.7d.tar.gz

Citrix Secure Gateway for Solaris 1.1

Citrix Secure Gateway for Solaris 1.14
https://secureportal.citrix.com/MyCitrix/Portal/login.aspx

Lite Speed Technologies LiteSpeed Web Server 1.1.1

Lite Speed Technologies LiteSpeed Web Server 1.3.2
http://www.litespeedtech.com/download.html

Lite Speed Technologies LiteSpeed Web Server 1.2.1

Lite Speed Technologies LiteSpeed Web Server 1.3.2
http://www.litespeedtech.com/download.html

Lite Speed Technologies LiteSpeed Web Server 1.2.2

Lite Speed Technologies LiteSpeed Web Server 1.3.2
http://www.litespeedtech.com/download.html

Apple Mac OS X Server 10.3.9

Apple SecUpdSrvr2005-007Pan.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=07796&plat form=osx&method=sa/SecUpdSrvr2005-007Pan.dmg

Apple Mac OS X 10.3.9

Apple SecUpd2005-007Pan.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=07801&plat form=osx&method=sa/SecUpd2005-007Pan.dmg

Apple Mac OS X 10.4.2

Apple SecUpd2005-007Ti.dmg
http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=07794&plat form=osx&method=sa/SecUpd2005-007Ti.dmg

VMWare GSX Server 2.5.1 build 5336

VMWare GSX Server 2.5.2
http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=1256

Check Point Software Providor-1 4.1 SP1

Check Point Software Provider-1 R55 OpenSSL Hotfix for Linux
Provider-1 NG with Application Intelligence R55 OpenSSL Hotfix
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=Provider-1&version_selected=NG%20with%20Application%20Int elligence&os_selected=Linux&patchlevel_selected=R55%20OpenSSL%20Hotfix

Check Point Software Provider-1 R55 OpenSSL Hotfix for SecurePlatform
Provider-1 NG with Application Intelligence R55 OpenSSL Hotfix
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=Provider-1&version_selected=NG%20with%20Application%20Int elligence&os_selected=SecurePlatform&patchlevel_selected=R55%20OpenSSL %20Hotfix

Check Point Software Provider-1 R55 OpenSSL Hotfix for Solaris
Provider-1 NG with Application Intelligence R55 OpenSSL Hotfix
http://www.checkpoint.com/techsupport/downloadApp/displayDownloads.jsp ?the_product=Provider-1&version_selected=NG%20with%20Application%20Int elligence&os_selected=Solaris%202.9&patchlevel_selected=R55%20OpenSSL% 20Hotfix

FreeBSD FreeBSD 4.8

FreeBSD openssl.patch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-04:05/openssl.patch

Symantec Clientless VPN Gateway 4400 Series 5.0

Symantec SCVG5-20040326-00.tgz
ftp://ftp.symantec.com/public/english_us_canada/products/sym_clientles s_vpn/sym_clientless_vpn_5/updates/SCVG5-20040326-00.tgz

4D WebSTAR 5.2

4D WebSTAR 5.3.2
Mac OS platform.
ftp://ftp.4d.com/products/webstar/current/4d_webstar_v/4d_webstar_v.si t

Secure Computing Sidewinder 5.2 .1.02

Secure Computing Patch 52110
ftp://ftp.activations.securecomputing.com/packages/sidewinder/5.2.1/52 110

SGI IRIX 6.5.20 f

SGI patch5535.tar
ftp://patches.sgi.com/support/free/security/patches/6.5.20/patch5535.t ar

SGI IRIX 6.5.20 m

SGI patch5535.tar
ftp://patches.sgi.com/support/free/security/patches/6.5.20/patch5535.t ar

SGI IRIX 6.5.21 m

SGI patch5533.tar
ftp://patches.sgi.com/support/free/security/patches/6.5.22/patch5533.t ar

SGI patch5536.tar
ftp://patches.sgi.com/support/free/security/patches/6.5.21/patch5536.t ar

SGI IRIX 6.5.22 m

SGI patch5533.tar
ftp://patches.sgi.com/support/free/security/patches/6.5.22/patch5533.t ar

SGI IRIX 6.5.23 m

SGI patch5533.tar
ftp://patches.sgi.com/support/free/security/patches/6.5.22/patch5533.t ar

SCO Unixware 7.1.1

SCO SCOSA-2005.7
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.7