Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/BA145AA7D5F493C3EADCC0CD3D54A38F
HistoryAug 07, 2007 - 12:00 a.m.

Security fix for the ALT Linux 9 package openssl10 version 0.9.8d-alt3

2007-08-0700:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
14

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

12.5%

Aug. 7, 2007 Dmitry V. Levin 0.9.8d-alt3

- Fixed side-channel attack on private keys
  (CVE-2007-3108, RH#245732, http://cvs.openssl.org/chngview?cn=16275).
- Mitigated branch prediction attacks
  (RH#250573, http://cvs.openssl.org/chngview?cn=16077).
- Changed SSL/TLS server implementation to be stricter about session ID
  context matching (RH#233599, http://cvs.openssl.org/chngview?cn=16006).

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

12.5%