Red Hat Security Advisory: openssl security update for Stronghold
Updated versions of Stronghold 3.0 that fix two OpenSSL vulnerabilities are now available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2003-0147US | medium5.0OT erhöht | — | ||
OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the… | ||||
| CVE-2003-0131US | high7.5 | — | ||
The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbach… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- BehobenRed Hat Stronghold 3
We have backported the security fixes for the versions of OpenSSL included in Stronghold 3. Stronghold 3.0 build code 3022 is now available, includes these fixes, and can be downloaded from: http://stronghold.redhat.com/sh3/ For information on how to upgrade between releases of Stronghold 3.0, see: http://stronghold.redhat.com/support/upgrade-sh3.xml
https://access.redhat.com/errata/RHSA-2003:117 - BehobenRed Hat Stronghold 3
We have backported the security fixes for the versions of OpenSSL included in Stronghold 3. Stronghold 3.0 build code 3022 is now available, includes these fixes, and can be downloaded from: http://stronghold.redhat.com/sh3/ For information on how to upgrade between releases of Stronghold 3.0, see: http://stronghold.redhat.com/support/upgrade-sh3.xml
https://access.redhat.com/errata/RHSA-2003:117
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan