[SECURITY] [DSA 2837-1] openssl security update

2014-01-07T15:42:02
ID DEBIAN:DSA-2837-1:B2C11
Type debian
Reporter Debian
Modified 2014-01-07T15:42:02

Description


Debian Security Advisory DSA-2837-1 security@debian.org http://www.debian.org/security/ Moritz Muehlenhoff January 07, 2014 http://www.debian.org/security/faq


Package : openssl Vulnerability : programming error Problem type : remote Debian-specific: no CVE ID : CVE-2013-4353

Anton Johannson discovered that an invalid TLS handshake package could crash OpenSSL with a NULL pointer dereference.

The oldstable distribution (squeeze) is not affected.

For the stable distribution (wheezy), this problem has been fixed in version 1.0.1e-2+deb7u3.

For the unstable distribution (sid), this problem has been fixed in version 1.0.1f-1.

We recommend that you upgrade your openssl packages.

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org