Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Debian 3.1: DSA-1379-2 Critical Off-By-One OpenSSL Code Execution

debian
Calendar Grey October 10, 2007
Debian Logo
Debian Security Advisory DSA-1390-1 tackles a buffer overflow vulnerability in the Apache server, recommending immediate patches for safeguarding.
An off-by-one error has been identified in the SSL_get_shared_ciphers() routine in OpenSSL, an implementation of Secure Socket Layer cryptographic libraries and utilities
Topics%20covered

Topics Covered

security advisory security update critical remote code execution debian openssl off-by-one error

Summary


We recommend that you upgrade your openssl097 and openssl096 packages.

Upgrade instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian 3.1 (oldstable)
- ----------------------Oldstable updates are available for alpha, amd64, arm, hppa, i386, ia64, m68k, mips, mipsel, powerpc, s390 and sparc.

Source archives:

Size/MD5 checksum: 617 d5c107efd03887064c12ca3f3785eb22
Size/MD5 checksum: 2184918 1b63bfdca1c37837dddde9f1623498f9
Size/MD5 checksum: 21639 3a9b336e6f7e1ecdb12b925928bf9061

alpha architecture (DEC Alpha)

Size/MD5 checksum: 1966700 cb66c5de2c58624...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security update critical remote code execution debian openssl off-by-one error

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here