[SECURITY] [DSA-2125-1] New openssl packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-2125-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 22, 2010 http://www.debian.org/security/faq -...

Fedora 13 : openssl-1.0.0b-1.fc13 (2010-17847)

This is a minor update from upstream fixing one race condition theoretically exploitable from remote connections in some SSL servers CVE-2010-3864. There are also a few additional bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 12 : openssl-1.0.0b-1.fc12 (2010-17826)

This is a minor update from upstream fixing one race condition theoretically exploitable from remote connections in some SSL servers CVE-2010-3864. There are also a few additional bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 14 : openssl-1.0.0b-1.fc14 (2010-17827)

This is a minor update from upstream fixing one race condition theoretically exploitable from remote connections in some SSL servers CVE-2010-3864. There are also a few additional bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

USN-1018-1: OpenSSL vulnerability

Rob Hulswit discovered a race condition in the OpenSSL TLS server extension parsing code when used within a threaded server. A remote attacker could trigger this flaw to cause a denial of service or possibly execute arbitrary code with application privileges. CVE-2010-3864...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : openssl vulnerability (USN-1018-1)

Rob Hulswit discovered a race condition in the OpenSSL TLS server extension parsing code when used within a threaded server. A remote attacker could trigger this flaw to cause a denial of service or possibly execute arbitrary code with application privileges. CVE-2010-3864. Note that Tenable...

RHEL 6 : openssl (RHSA-2010:0888)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0888 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a full-strength,...

CVE-2010-3864

CVE-2010-3864 involves a race condition in the OpenSSL TLS server extension parsing (ssl/t1_lib.c) when OpenSSL is used in multi‑threaded servers with internal caching, which can lead to a heap-based buffer overflow. Affected OpenSSL versions include 0.9.8f–0.9.8o and 1.0.0/1.0.0a. The issue can ...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0b-alt1

Nov. 16, 2010 Dmitry V. Levin 1.0.0b-alt1 - Updated to 1.0.0b fixes CVE-2010-2939 and CVE-2010-3864...

Security fix for the ALT Linux 8 package openssl10 version 1.0.0b-alt1

Nov. 16, 2010 Dmitry V. Levin 1.0.0b-alt1 - Updated to 1.0.0b fixes CVE-2010-2939 and CVE-2010-3864...

Security fix for the ALT Linux 6 package openssl10 version 1.0.0b-alt1

Nov. 16, 2010 Dmitry V. Levin 1.0.0b-alt1 - Updated to 1.0.0b fixes CVE-2010-2939 and CVE-2010-3864...

Security fix for the ALT Linux 9 package openssl10 version 1.0.0b-alt1

Nov. 16, 2010 Dmitry V. Levin 1.0.0b-alt1 - Updated to 1.0.0b fixes CVE-2010-2939 and CVE-2010-3864...

VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

SUSE: Security Advisory for java-1_6_0-sun (SUSE-SA:2009:058)

The remote host is missing updates announced in advisory SUSE-SA:2009:058. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1541)

The Sun Java 6 SDK/JRE was updated to u17 update fixing bugs and various security issues : CVE-2009-3866:The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1541)

The Sun Java 6 SDK/JRE was updated to u17 update fixing bugs and various security issues : CVE-2009-3866:The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers...

openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-1529)

java-150-sun u22 update fixes the following security bugs : - CVE-2009-3864: CVSS v2 Base Score: 7.5 - CVE-2009-3867: CVSS v2 Base Score: 9.3 - CVE-2009-3868: CVSS v2 Base Score: 9.3 - CVE-2009-3869: CVSS v2 Base Score: 9.3 - CVE-2009-3871: CVSS v2 Base Score: 9.3 - CVE-2009-3872: CVSS v2 Base...

openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-1529)

java-150-sun u22 update fixes the following security bugs : - CVE-2009-3864: CVSS v2 Base Score: 7.5 - CVE-2009-3867: CVSS v2 Base Score: 9.3 - CVE-2009-3868: CVSS v2 Base Score: 9.3 - CVE-2009-3869: CVSS v2 Base Score: 9.3 - CVE-2009-3871: CVSS v2 Base Score: 9.3 - CVE-2009-3872: CVSS v2 Base...

CVE-2009-3864

The Java Update functionality in Java Runtime Environment JRE in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before Update 17, when a non-English version of Windows is used, does not retrieve available new JRE versions, which allows remote attackers to leverage vulnerabiliti...