Ubuntu 16.04 LTS : OpenSSL update (USN-6663-2)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6663-2 advisory. USN-6663-1 provided a security update for OpenSSL. This update provides the corresponding update for Ubuntu 16.04 LTS. Tenable has extracted the preceding...

DLA-637-1 openssl - security update

Bulletin has no description...

Ubuntu 12.04 LTS : openssl vulnerability (USN-2863-1) (SLOTH)

Karthikeyan Bhargavan and Gaetan Leurent discovered that OpenSSL incorrectly allowed MD5 to be used for TLS 1.2 connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. Note that Tenable Network Security has...

Debian DSA-2998-1 : openssl - security update

Multiple vulnerabilities have been identified in OpenSSL, a Secure Sockets Layer toolkit, that may result in denial of service application crash, large memory consumption, information leak, protocol downgrade. Additionally, a buffer overrun affecting only applications explicitly set up for SRP ha...

DSA-2998-1 openssl - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2998-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2896-2] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2896-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 08, 2014 http://www.debian.org/security/faq -...

Debian DSA-2896-1 : openssl - security update

A vulnerability has been discovered in OpenSSL's support for the TLS/DTLS Heartbeat extension. Up to 64KB of memory from either client or server can be recovered by an attacker. This vulnerability might allow an attacker to compromise the private key and other sensitive data in memory. All users...

Ubuntu 12.04 LTS : openssl vulnerability (USN-1516-1)

It was discovered that OpenSSL incorrectly handled the SSLOPALL setting. This resulted in TLS 1.1 and TLS 1.2 being inadvertently disabled for certain server and client applications. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...