Red Hat Security Advisory: openssl security update for Stronghold
A new Stronghold 4 release is available which contains an updated fix for the OpenSSL ASN1 vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2002-0659US | medium5.0 | Exploit | ||
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- FixedRed Hat Stronghold 4
We have backported the security fixes for the versions of OpenSSL and mm included in Stronghold 4. The fixed packages are now available via the update agent service; run $ bin/agent from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions. After upgrading Stronghold, the server must be completely restarted by running the following commands from the install root: $ bin/stop-server $ bin/start-server For more information on how to upgrade between releases of Stronghold 4, see http://stronghold.redhat.com/support/upgrade-sh4
https://access.redhat.com/errata/RHSA-2002:193
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan