lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <87wr8ii5b3.fsf@mid.deneb.enyo.de> Date: Mon, 23 Jan 2012 20:31:44 +0100 From: Florian Weimer <fw@...eb.enyo.de> To: debian-security-announce@...ts.debian.org Subject: [SECURITY] [DSA 2392-1] openssl security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2392-1 security@...ian.org http://www.debian.org/security/ Florian Weimer January 23, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : openssl Vulnerability : out-of-bounds read Problem type : remote Debian-specific: no CVE ID : CVE-2012-0050 Antonio Martin discovered a denial-of-service vulnerability in OpenSSL, an implementation of TLS and related protocols. A malicious client can cause the DTLS server implementation to crash. Regular, TCP-based TLS is not affected by this issue. For the oldstable distribution (lenny), this problem has been fixed in version 0.9.8g-15+lenny16. For the stable distribution (squeeze), this problem has been fixed in version 0.9.8o-4squeeze7. For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been fixed in version 1.0.0g-1. We recommend that you upgrade your openssl packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: debian-security-announce@...ts.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQEcBAEBAgAGBQJPHbhEAAoJEL97/wQC1SS+0/8H/0N8mxv9ZyjGsx7LPBFpYrjT 1v83soDr0OgT9jmnTYO4xKLuclPniTK74RoqkK9d6img6BFO2ycb0XD2y4cvX+TB dJncBiWV+v1zVlayXQydLMj/17I0LeKUdduWlLkfcedi4scxC3EbXWN5Q5EwK369 zY7zltv7pJgmZgIN5ZSIPPdUDmf8yoK+UfIJyG6rzCciHJqWnc/cJm6lM7tPo7Sx OFWHI6qFZ+A3S4JjMUr2+Ey2b69zPjYOgVUejRklDMCcs4DxkomL9aJJbu6lWrD6 weeLCLMPVo60gZEnfcfnrDolRpZ8X5qam/E1CIgvOgRR9Hx6DXiTDOUX8/kjiD8= =t/+m -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists