User: Password:
Subscribe / Log in / New account

Eridani alert ERISA-2002:034 (openssl)

From:  Eridani Star System <>
Subject:  [Eridani-Announce] ERISA-2002:034 - openssl
Date:  Tue, 6 Aug 2002 18:34:50 +0100 (BST)

========================================================================= ERIDANI LINUX - SECURITY ANNOUNCEMENT ========================================================================= Package: openssl Summary: SSL protocol data stream length validation bug Date: 2002-08-06 ID: ERISA-2002:034 ========================================================================= Problem description: The SSL protocol data stream includes the lengths of data structures being transferred, and these lengths may not be validated correctly. A malicious client or server could use this to cause an SSL-enabled application to crash or lock up, and can be used as a denial-of-service attack if the affected process is a server. Whether this could be used for remote code execution has not been verified. ------------------------------------------------------------------------- Updated packages: 7081df155e433b186986fa35d7e52279 openssl-0.9.5a-30.src.rpm 542c9cfc2c7ebc7a0aeee3b3f964f667 openssl-0.9.5a-30.i386.rpm 264da10bab96d3a8eaeb9c385004e1f2 openssl-devel-0.9.5a-30.i386.rpm 9d0b9733d2952f2694571c8adb9ef739 openssl-perl-0.9.5a-30.i386.rpm dbdef530a747aee04514beb7e6f38e4e openssl-python-0.9.5a-30.i386.rpm ------------------------------------------------------------------------- References: ========================================================================= Packages available from or by HTTP from Packages are signed with our GNU GPG key, also on our FTP site. Users of releases of Eridani Linux prior to 6.3 are advised to download the source RPM and rebuild for their system. Copyright (C)2002 Eridani Star System -- Michael "Soruk" McConnell Eridani Linux -- The Most Up-to-Date Red Hat-based Linux CDROMs Available Email: -- Also Debian, Slackware, Mandrake and more... _______________________________________________ Eridani-Announce mailing list To be removed from this list email requesting removal.

(Log in to post comments)

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds