• info
• discussion
• exploit
• solution
• references

Multiple Vendor Hyper-Threading Technology Information Disclosure Vulnerability

Solution:
Please see the referenced advisories for more information.


Turbolinux Appliance Server 1.0 Workgroup Edition

• Turbolinux openssl-0.9.6m-3.i586.rpm
  Turbolinux Appliance Server 1.0 Workgroup Edition
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/


• Turbolinux openssl-devel-0.9.6m-3.i586.rpm
  Turbolinux Appliance Server 1.0 Workgroup Edition
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/

Mandriva Linux Mandrake 10.0 AMD64

• Mandriva lib64openssl0.9.7-0.9.7c-3.2.100mdk.amd64.rpm
  Mandrakelinux 10.0/AMD64:
  http://www.mandriva.com/en/download


• Mandriva lib64openssl0.9.7-devel-0.9.7c-3.2.100mdk.amd64.rpm
  Mandrakelinux 10.0/AMD64:
  http://www.mandriva.com/en/download


• Mandriva lib64openssl0.9.7-static-devel-0.9.7c-3.2.100mdk.amd64.rpm
  Mandrakelinux 10.0/AMD64:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.7c-3.2.100mdk.amd64.rpm
  Mandrakelinux 10.0/AMD64:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.7c-3.2.100mdk.src.rpm
  Mandrakelinux 10.0/AMD64:
  http://www.mandriva.com/en/download

Turbolinux Turbolinux Desktop 10.0

• Turbolinux openssl-0.9.7d-4.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssl-0.9.7d-4.i586.rpm


• Turbolinux openssl-compat-0.9.6m-7.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssl-compat-0.9.6m-7.i586.rpm


• Turbolinux openssl-devel-0.9.7d-4.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssl-devel-0.9.7d-4.i586.rpm

Mandriva Linux Mandrake 10.1 x86_64

• Mandriva lib64openssl0.9.7-0.9.7d-1.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64openssl0.9.7-devel-0.9.7d-1.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64openssl0.9.7-static-devel-0.9.7d-1.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.7d-1.2.101mdk.src.rpm
  Mandrakelinux 10.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.7d-1.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64:
  http://www.mandriva.com/en/download

MandrakeSoft Corporate Server 2.1 x86_64

• Mandriva libopenssl0-0.9.6i-1.9.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva libopenssl0-devel-0.9.6i-1.9.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva libopenssl0-static-devel-0.9.6i-1.9.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.6i-1.9.C21mdk.src.rpm
  Corporate Server 2.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.6i-1.9.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www.mandriva.com/en/download

MandrakeSoft Corporate Server 2.1

• Mandriva libopenssl0-0.9.6i-1.9.C21mdk.i586.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva libopenssl0-devel-0.9.6i-1.9.C21mdk.i586.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva libopenssl0-static-devel-0.9.6i-1.9.C21mdk.i586.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.6i-1.9.C21mdk.i586.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.6i-1.9.C21mdk.src.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download

MandrakeSoft Corporate Server 3.0

• Mandriva libopenssl0.9.7-0.9.7c-3.2.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libopenssl0.9.7-devel-0.9.7c-3.2.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libopenssl0.9.7-static-devel-0.9.7c-3.2.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.7c-3.2.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva openssl-0.9.7c-3.2.C30mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download

FreeBSD FreeBSD 4.11 -RELEASE-p3

• FreeBSD htt411.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:09/htt411.patch

FreeBSD FreeBSD 5.3

• FreeBSD htt5.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:09/htt5.patch

Turbolinux Turbolinux Workstation 7.0

• Turbolinux openssl-0.9.6m-3.i586.rpm
  Turbolinux 7 Workstation
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 7/updates/RPMS/openssl-0.9.6m-3.i586.rpm


• Turbolinux openssl-devel-0.9.6m-3.i586.rpm
  Turbolinux 7 Workstation
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 7/updates/RPMS/openssl-devel-0.9.6m-3.i586.rpm