Red Hat Security Advisory: openssl security update for Stronghold
Updated versions of Stronghold 3.0 that fix two OpenSSL vulnerabilities are now available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2003-0147US | medium5.0OT elevated | — | ||
OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the… | ||||
| CVE-2003-0131US | high7.5 | — | ||
The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbach… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- FixedRed Hat Stronghold 3
We have backported the security fixes for the versions of OpenSSL included in Stronghold 3. Stronghold 3.0 build code 3022 is now available, includes these fixes, and can be downloaded from: http://stronghold.redhat.com/sh3/ For information on how to upgrade between releases of Stronghold 3.0, see: http://stronghold.redhat.com/support/upgrade-sh3.xml
https://access.redhat.com/errata/RHSA-2003:117 - FixedRed Hat Stronghold 3
We have backported the security fixes for the versions of OpenSSL included in Stronghold 3. Stronghold 3.0 build code 3022 is now available, includes these fixes, and can be downloaded from: http://stronghold.redhat.com/sh3/ For information on how to upgrade between releases of Stronghold 3.0, see: http://stronghold.redhat.com/support/upgrade-sh3.xml
https://access.redhat.com/errata/RHSA-2003:117
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan