Paketname
openssl
Datum
2009-04-03
Advisory ID
MDVSA-2009:087
Betroffene Versionen
2009.0 x86_64 , CS4.0 x86_64 , MNF2.0 i586 , 2008.0 i586 , 2009.0 i586 , CS3.0 x86_64 , 2008.0 x86_64 , CS3.0 i586 , 2008.1 x86_64 , 2008.1 i586 , CS4.0 i586

Problembeschreibung

A security vulnerability has been identified and fixed in OpenSSL,
which could crash applications using OpenSSL library when parsing
malformed certificates (CVE-2009-0590).

The updated packages have been patched to prevent this.

Aktualisierte Pakete

2009.0 x86_64

 18b0da8ae3998bb143efbe9fbf78282d  2009.0/x86_64/lib64openssl0.9.8-0.9.8h-3.2mdv2009.0.x86_64.rpm
 01310fb6273e795489023f02d71434d4  2009.0/x86_64/lib64openssl0.9.8-devel-0.9.8h-3.2mdv2009.0.x86_64.rpm
 2da04ce75c2371f1ee15d94742f00ee6  2009.0/x86_64/lib64openssl0.9.8-static-devel-0.9.8h-3.2mdv2009.0.x86_64.rpm
 5529205245e554324f40c87ba665b198  2009.0/x86_64/openssl-0.9.8h-3.2mdv2009.0.x86_64.rpm 
 44980fee28c99bb22012e36e88eeaec7  2009.0/SRPMS/openssl-0.9.8h-3.2mdv2009.0.src.rpm

CS4.0 x86_64

 b8c7201ae9c41aa0f391f877da24e312  corporate/4.0/x86_64/lib64openssl0.9.7-0.9.7g-2.8.20060mlcs4.x86_64.rpm
 d9329b8d694a37cd24d3e2373eb02066  corporate/4.0/x86_64/lib64openssl0.9.7-devel-0.9.7g-2.8.20060mlcs4.x86_64.rpm
 e9c6bd67410f238a0b775361e08e7af3  corporate/4.0/x86_64/lib64openssl0.9.7-static-devel-0.9.7g-2.8.20060mlcs4.x86_64.rpm
 88d42200e0464824e003ce4451a175e7  corporate/4.0/x86_64/openssl-0.9.7g-2.8.20060mlcs4.x86_64.rpm 
 12bd0d350017d5ad4930beaad07e2a92  corporate/4.0/SRPMS/openssl-0.9.7g-2.8.20060mlcs4.src.rpm

MNF2.0 i586

 74728af83737762b744092597629e1db  mnf/2.0/i586/libopenssl0.9.7-0.9.7c-3.10.C30mdk.i586.rpm
 0de1c4403ddbba33f21a99e2879af9cc  mnf/2.0/i586/libopenssl0.9.7-devel-0.9.7c-3.10.C30mdk.i586.rpm
 3b79e5cdb909115e3770ee59a17f757a  mnf/2.0/i586/libopenssl0.9.7-static-devel-0.9.7c-3.10.C30mdk.i586.rpm
 39b67cff96aaa016f119d5ddff312f54  mnf/2.0/i586/openssl-0.9.7c-3.10.C30mdk.i586.rpm 
 1201abd42759b7e5a0d96aa4f96a9dd1  mnf/2.0/SRPMS/openssl-0.9.7c-3.10.C30mdk.src.rpm

2008.0 i586

 6b754c91594c65b327d2dba0c7402d55  2008.0/i586/libopenssl0.9.8-0.9.8e-8.3mdv2008.0.i586.rpm
 7925aa846daa02085d8261e17f2f5875  2008.0/i586/libopenssl0.9.8-devel-0.9.8e-8.3mdv2008.0.i586.rpm
 051e206025736be6aca4e5b2a57b8f94  2008.0/i586/libopenssl0.9.8-static-devel-0.9.8e-8.3mdv2008.0.i586.rpm
 01f56e6d5ee540090fbee6d34f29e65a  2008.0/i586/openssl-0.9.8e-8.3mdv2008.0.i586.rpm 
 c70caa3e4c03412a02cc6bbb36902382  2008.0/SRPMS/openssl-0.9.8e-8.3mdv2008.0.src.rpm

2009.0 i586

 4ec73f053278a9c77ccd62034a1e4c72  2009.0/i586/libopenssl0.9.8-0.9.8h-3.2mdv2009.0.i586.rpm
 33da38ad5f20eec511a60b5b476cf241  2009.0/i586/libopenssl0.9.8-devel-0.9.8h-3.2mdv2009.0.i586.rpm
 70f6020e9fe66badabf815f7256b9718  2009.0/i586/libopenssl0.9.8-static-devel-0.9.8h-3.2mdv2009.0.i586.rpm
 8f87c9a8339052d4c261cfd818486c1d  2009.0/i586/openssl-0.9.8h-3.2mdv2009.0.i586.rpm 
 44980fee28c99bb22012e36e88eeaec7  2009.0/SRPMS/openssl-0.9.8h-3.2mdv2009.0.src.rpm

CS3.0 x86_64

 c567e5f61d5cae04b02bfa43d307cf95  corporate/3.0/x86_64/lib64openssl0.9.7-0.9.7c-3.10.C30mdk.x86_64.rpm
 4c487ef9f195ac905d8e27a2ee5a3aad  corporate/3.0/x86_64/lib64openssl0.9.7-devel-0.9.7c-3.10.C30mdk.x86_64.rpm
 11faa9b02898eaec3d346e56c2c37567  corporate/3.0/x86_64/lib64openssl0.9.7-static-devel-0.9.7c-3.10.C30mdk.x86_64.rpm
 0485fbcd4bb28224e6716114eb6dd372  corporate/3.0/x86_64/openssl-0.9.7c-3.10.C30mdk.x86_64.rpm 
 47da419d4ed666fcb064635be15a6450  corporate/3.0/SRPMS/openssl-0.9.7c-3.10.C30mdk.src.rpm

2008.0 x86_64

 bffedd1a3568c6756f2a7e208711406b  2008.0/x86_64/lib64openssl0.9.8-0.9.8e-8.3mdv2008.0.x86_64.rpm
 bdd18bfb34dc3fe03ab0427eaa998762  2008.0/x86_64/lib64openssl0.9.8-devel-0.9.8e-8.3mdv2008.0.x86_64.rpm
 c1966f47b75d196587ba1bbebeb36de6  2008.0/x86_64/lib64openssl0.9.8-static-devel-0.9.8e-8.3mdv2008.0.x86_64.rpm
 2d0ee52fbbe9736e3e36d0af3eccfab4  2008.0/x86_64/openssl-0.9.8e-8.3mdv2008.0.x86_64.rpm 
 c70caa3e4c03412a02cc6bbb36902382  2008.0/SRPMS/openssl-0.9.8e-8.3mdv2008.0.src.rpm

CS3.0 i586

 1b58ced1478d63969727c9346305e20d  corporate/3.0/i586/libopenssl0.9.7-0.9.7c-3.10.C30mdk.i586.rpm
 3ebb9340042ad4fbf9664ba47148fd59  corporate/3.0/i586/libopenssl0.9.7-devel-0.9.7c-3.10.C30mdk.i586.rpm
 c57397a9e6773866c58d11af8b9599a4  corporate/3.0/i586/libopenssl0.9.7-static-devel-0.9.7c-3.10.C30mdk.i586.rpm
 feaecf68067dd7d75cf30790b0702338  corporate/3.0/i586/openssl-0.9.7c-3.10.C30mdk.i586.rpm 
 47da419d4ed666fcb064635be15a6450  corporate/3.0/SRPMS/openssl-0.9.7c-3.10.C30mdk.src.rpm

2008.1 x86_64

 77d9d1e7f5dc49dec60c69cc1b028463  2008.1/x86_64/lib64openssl0.9.8-0.9.8g-4.3mdv2008.1.x86_64.rpm
 0bcee0a1c173a8f5d8e8adbb81708a6c  2008.1/x86_64/lib64openssl0.9.8-devel-0.9.8g-4.3mdv2008.1.x86_64.rpm
 cb5ff411ea8180862e0d411239c76341  2008.1/x86_64/lib64openssl0.9.8-static-devel-0.9.8g-4.3mdv2008.1.x86_64.rpm
 02c72439aa06c9310494b17ebc676e0c  2008.1/x86_64/openssl-0.9.8g-4.3mdv2008.1.x86_64.rpm 
 e032c64f27cc35e9c72c9ee1d28dfaf3  2008.1/SRPMS/openssl-0.9.8g-4.3mdv2008.1.src.rpm

2008.1 i586

 dc492cf18385aabfb94663b1a121a776  2008.1/i586/libopenssl0.9.8-0.9.8g-4.3mdv2008.1.i586.rpm
 bb4d4453048fb8f68fa3d4acaddaa0c8  2008.1/i586/libopenssl0.9.8-devel-0.9.8g-4.3mdv2008.1.i586.rpm
 ad22bc2ee1d238606133616104420669  2008.1/i586/libopenssl0.9.8-static-devel-0.9.8g-4.3mdv2008.1.i586.rpm
 f7f7edf2ca2e1422d718a40c2c14419b  2008.1/i586/openssl-0.9.8g-4.3mdv2008.1.i586.rpm 
 e032c64f27cc35e9c72c9ee1d28dfaf3  2008.1/SRPMS/openssl-0.9.8g-4.3mdv2008.1.src.rpm

CS4.0 i586

 72db90b1c8362f8122bb29101e8f7ea3  corporate/4.0/i586/libopenssl0.9.7-0.9.7g-2.8.20060mlcs4.i586.rpm
 2957dac9e5461336cf68433f4b147de1  corporate/4.0/i586/libopenssl0.9.7-devel-0.9.7g-2.8.20060mlcs4.i586.rpm
 e0f441e9cf9c18321f4e8b3099c2df5a  corporate/4.0/i586/libopenssl0.9.7-static-devel-0.9.7g-2.8.20060mlcs4.i586.rpm
 4a020ff36ff58d2ae9ccfc852f265d1d  corporate/4.0/i586/openssl-0.9.7g-2.8.20060mlcs4.i586.rpm 
 12bd0d350017d5ad4930beaad07e2a92  corporate/4.0/SRPMS/openssl-0.9.7g-2.8.20060mlcs4.src.rpm

Referenzen