Solaris 10 (x86) : 121230-02

SunOS 5.10x86: libssl patch. Date this patch was last updated by Sun : Apr/23/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security fix for the ALT Linux 10 package node version 6.13.0-alt1

Feb. 27, 2018 Alexey Shabalin 6.13.0-alt1 - new version 6.13.0 - 2018-02-13, Version 6.13.0 'Boron' LTS - fixed CVE-2017-15896, CVE-2017-3738...

openSUSE Security Update : nodejs6 (openSUSE-2018-116)

This update for nodejs6 fixes the following issues : Security issues fixed : - CVE-2017-15896: Vulnerable to CVE-2017-3737 due to embedded OpenSSL bsc1072322. - CVE-2017-14919: Embedded zlib issue could cause a DoS via specific windowBits value. - CVE-2017-3738: Embedded OpenSSL is vulnerable to...

openSUSE Security Update : nodejs4 (openSUSE-2018-5)

This update for nodejs4 fixes the following issues : Security issues fixed : - CVE-2017-15896: Vulnerable to CVE-2017-3737 due to embedded OpenSSL bsc1072322. - CVE-2017-14919: Embedded zlib issue could cause a DoS via specific windowBits value. - CVE-2017-3738: Embedded OpenSSL is vulnerable to...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2n-alt0.M80P.1

1.0.2n-alt0.M80P.1 built Dec. 18, 2017 Gleb Fotengauer-Malinovskiy in task 195953 Dec. 7, 2017 Gleb Fotengauer-Malinovskiy - Backported to p8 branch fixes CVE-2017-3737, CVE-2017-3738...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2017:3343-1)

This update for openssl fixes the following issues : - OpenSSL Security Advisory 07 Dec 2017 - CVE-2017-3737: OpenSSL 1.0.2 starting from version 1.0.2b introduced an 'error state' mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error...

openSUSE Security Update : openssl (openSUSE-2017-1381)

This update for openssl fixes the following issues : - OpenSSL Security Advisory 07 Dec 2017 - CVE-2017-3737: OpenSSL 1.0.2 starting from version 1.0.2b introduced an 'error state' mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error...

Debian DSA-4065-1 : openssl1.0 - security update

Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2017-3737 David Benjamin of Google reported that OpenSSL does not properly handle SSLread and SSLwrite while being...

[SECURITY] [DSA 4065-1] openssl1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4065-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2017 https://www.debian.org/security/faq -...

openSUSE: Security Advisory for openssl (openSUSE-SU-2017:3345-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2017:3343-1 Security update for openssl

This update for openssl fixes the following issues: - OpenSSL Security Advisory 07 Dec 2017 CVE-2017-3737: OpenSSL 1.0.2 starting from version 1.0.2b introduced an 'error state' mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error...

FreeBSD : node.js -- Data Confidentiality/Integrity Vulnerability, December 2017 (bea84a7a-e0c9-11e7-b4f3-11baa0c2df21)

"Node.js reports : Data Confidentiality/Integrity Vulnerability - CVE-2017-15896 Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSLread due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using t...

Ubuntu: Security Advisory (USN-3512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3512-1: OpenSSL vulnerabilities

David Benjamin discovered that OpenSSL did not correctly prevent buggy applications that ignore handshake errors from subsequently calling certain functions. CVE-2017-3737 It was discovered that OpenSSL incorrectly performed the x8664 Montgomery multiplication procedure. While unlikely, a remote...

FreeBSD-SA-17:12.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-17:12.openssl Security Advisory The FreeBSD Project Topic: OpenSSL multiple vulnerabilities Category: contrib Module: openssl Announced: 2017-12-09 Affects: All...

node.js -- Data Confidentiality/Integrity Vulnerability, December 2017

Node.js reports: Data Confidentiality/Integrity Vulnerability - CVE-2017-15896 Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSLread due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the...

CVE-2017-3738

CVE-2017-3738 is an overflow bug in the AVX2 Montgomery multiplication used for 1024-bit moduli in OpenSSL. The issue affects x86_64 builds with AVX2 (not ADX) and can, in very unlikely cases, enable private-key recovery on affected architectures. OpenSSL 1.0.2n fixes the flaw; OpenSSL 1.1.0 is n...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2n-alt1

Dec. 7, 2017 Gleb Fotengauer-Malinovskiy 1.0.2n-alt1 - Updated to v1.0.2n fixes CVE-2017-3737, CVE-2017-3738. - Added --disable tsget knob. - Added support of s390x and mips architectures...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2n-alt1

Dec. 7, 2017 Gleb Fotengauer-Malinovskiy 1.0.2n-alt1 - Updated to v1.0.2n fixes CVE-2017-3737, CVE-2017-3738. - Added --disable tsget knob. - Added support of s390x and mips architectures...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2n-alt1

Dec. 7, 2017 Gleb Fotengauer-Malinovskiy 1.0.2n-alt1 - Updated to v1.0.2n fixes CVE-2017-3737, CVE-2017-3738. - Added --disable tsget knob. - Added support of s390x and mips architectures...