Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Loading...
Explore Latest Linux Security advisories
We found 2 articles for you...
100
security advisorymoderateexploitSUSE: 2023:4952-2 critical: openssl vulnerabilities fixed
* bsc#1208143 * bsc#1217277 Cross-References: * CVE-2023-0361 . # Security update for gnutls Announcement ID: SUSE-SU-2023:4952-1 Rating: moderate References: * bsc#1208143 * bsc#1217277 Cross-References: * CVE-2023-0361 * CVE-2023-5981 CVSS scores: * CVE-2023-0361 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-0361 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-5981 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-5981 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE CaaS Platform 4.0 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 An update that solves two vulnerabilities can now be installed. ## Description: This update for gnutls fixes the following issues: * CVE-2023-0361: Fixed a Bleichenbacher oracle in the TLS RSA key exchange (bsc#1208143). * CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4952=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4952=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4952=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of thecomplete cluster in a controlled way. ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * gnutls-debuginfo-3.6.7-150000.6.50.1 * libgnutls30-debuginfo-3.6.7-150000.6.50.1 * libgnutls-devel-3.6.7-150000.6.50.1 * libgnutlsxx28-debuginfo-3.6.7-150000.6.50.1 * libgnutlsxx28-3.6.7-150000.6.50.1 * gnutls-3.6.7-150000.6.50.1 * libgnutls30-3.6.7-150000.6.50.1 * gnutls-debugsource-3.6.7-150000.6.50.1 * libgnutlsxx-devel-3.6.7-150000.6.50.1 * libgnutls30-hmac-3.6.7-150000.6.50.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * libgnutls30-32bit-3.6.7-150000.6.50.1 * libgnutls30-hmac-32bit-3.6.7-150000.6.50.1 * libgnutls30-32bit-debuginfo-3.6.7-150000.6.50.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * gnutls-debuginfo-3.6.7-150000.6.50.1 * libgnutls30-debuginfo-3.6.7-150000.6.50.1 * libgnutls-devel-3.6.7-150000.6.50.1 * libgnutlsxx28-debuginfo-3.6.7-150000.6.50.1 * libgnutlsxx28-3.6.7-150000.6.50.1 * gnutls-3.6.7-150000.6.50.1 * libgnutls30-3.6.7-150000.6.50.1 * gnutls-debugsource-3.6.7-150000.6.50.1 * libgnutlsxx-devel-3.6.7-150000.6.50.1 * libgnutls30-hmac-3.6.7-150000.6.50.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * libgnutls30-32bit-3.6.7-150000.6.50.1 * libgnutls30-hmac-32bit-3.6.7-150000.6.50.1 * libgnutls30-32bit-debuginfo-3.6.7-150000.6.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * gnutls-debuginfo-3.6.7-150000.6.50.1 * libgnutls30-debuginfo-3.6.7-150000.6.50.1 * libgnutls-devel-3.6.7-150000.6.50.1 * libgnutlsxx28-debuginfo-3.6.7-150000.6.50.1 * libgnutlsxx28-3.6.7-150000.6.50.1 * gnutls-3.6.7-150000.6.50.1 * libgnutls30-3.6.7-150000.6.50.1 * gnutls-debugsource-3.6.7-150000.6.50.1 * libgnutlsxx-devel-3.6.7-150000.6.50.1 * libgnutls30-hmac-3.6.7-150000.6.50.1 * SUSE LinuxEnterprise Server for SAP Applications 15 SP1 (x86_64) * libgnutls30-32bit-3.6.7-150000.6.50.1 * libgnutls30-hmac-32bit-3.6.7-150000.6.50.1 * libgnutls30-32bit-debuginfo-3.6.7-150000.6.50.1 * SUSE CaaS Platform 4.0 (x86_64) * gnutls-debuginfo-3.6.7-150000.6.50.1 * libgnutls30-32bit-3.6.7-150000.6.50.1 * libgnutls30-debuginfo-3.6.7-150000.6.50.1 * libgnutls-devel-3.6.7-150000.6.50.1 * libgnutlsxx28-debuginfo-3.6.7-150000.6.50.1 * libgnutlsxx28-3.6.7-150000.6.50.1 * gnutls-3.6.7-150000.6.50.1 * libgnutlsxx-devel-3.6.7-150000.6.50.1 * libgnutls30-3.6.7-150000.6.50.1 * gnutls-debugsource-3.6.7-150000.6.50.1 * libgnutls30-hmac-32bit-3.6.7-150000.6.50.1 * libgnutls30-32bit-debuginfo-3.6.7-150000.6.50.1 * libgnutls30-hmac-3.6.7-150000.6.50.1 ## References: * https://www.suse.com/security/cve/CVE-2023-0361.html * https://www.suse.com/security/cve/CVE-2023-5981.html * https://bugzilla.suse.com/show_bug.cgi?id=1208143 * https://bugzilla.suse.com/show_bug.cgi?id=1217277 . An update has been released for OpenSSL to address security flaws in Red Hat platforms. Apply this patch to enhance the protection of your infrastructure.. gnutls update,SUSE security advisory,critical software patch,system protection measures. . LinuxSecurity.com Team
Dec 21, 2023
SuSE
98
security advisoryRed Hatbug fixRed Hat: RHSA-2019-2169-01 Important: Bluetooth Key Exchange Issue
An update for linux-firmware is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: linux-firmware security, bug fix, and enhancement update Advisory ID: RHSA-2019:2169-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2169 Issue date: 2019-08-06 CVE Names: CVE-2018-5383 ==================================================================== 1. Summary: An update for linux-firmware is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - noarch Red Hat Enterprise Linux ComputeNode (v. 7) - noarch Red Hat Enterprise Linux Server (v. 7) - noarch Red Hat Enterprise Linux Workstation (v. 7) - noarch 3. Description: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fix(es): * kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange (CVE-2018-5383) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section. 4. Solution: For details on how to applythis update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1614159 - CVE-2018-5383 kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange 1654809 - [qed] 8.37.7.0 firmware image is needed for DPDK 18.11 1671610 - [Diamanti]Programming the VF MAC address fails without updated FW 1698960 - Cavium/Marvell 7.7 FEAT] BNX2X_FW: Update to 7.13.11.0 firmware files 1702330 - [NETRO 7.7 Feat] Pull new version of Netronome flower firmware (AOTC-2.10.A.23) 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: linux-firmware-20190429-72.gitddde598.el7.src.rpm noarch: iwl100-firmware-39.31.5.1-72.el7.noarch.rpm iwl1000-firmware-39.31.5.1-72.el7.noarch.rpm iwl105-firmware-18.168.6.1-72.el7.noarch.rpm iwl135-firmware-18.168.6.1-72.el7.noarch.rpm iwl2000-firmware-18.168.6.1-72.el7.noarch.rpm iwl2030-firmware-18.168.6.1-72.el7.noarch.rpm iwl3160-firmware-22.0.7.0-72.el7.noarch.rpm iwl3945-firmware-15.32.2.9-72.el7.noarch.rpm iwl4965-firmware-228.61.2.24-72.el7.noarch.rpm iwl5000-firmware-8.83.5.1_1-72.el7.noarch.rpm iwl5150-firmware-8.24.2.2-72.el7.noarch.rpm iwl6000-firmware-9.221.4.1-72.el7.noarch.rpm iwl6000g2a-firmware-17.168.5.3-72.el7.noarch.rpm iwl6000g2b-firmware-17.168.5.2-72.el7.noarch.rpm iwl6050-firmware-41.28.5.1-72.el7.noarch.rpm iwl7260-firmware-22.0.7.0-72.el7.noarch.rpm iwl7265-firmware-22.0.7.0-72.el7.noarch.rpm linux-firmware-20190429-72.gitddde598.el7.noarch.rpm Red Hat Enterprise Linux ComputeNode (v.7): Source: linux-firmware-20190429-72.gitddde598.el7.src.rpm noarch: iwl100-firmware-39.31.5.1-72.el7.noarch.rpm iwl1000-firmware-39.31.5.1-72.el7.noarch.rpm iwl105-firmware-18.168.6.1-72.el7.noarch.rpm iwl135-firmware-18.168.6.1-72.el7.noarch.rpm iwl2000-firmware-18.168.6.1-72.el7.noarch.rpm iwl2030-firmware-18.168.6.1-72.el7.noarch.rpm iwl3160-firmware-22.0.7.0-72.el7.noarch.rpm iwl3945-firmware-15.32.2.9-72.el7.noarch.rpm iwl4965-firmware-228.61.2.24-72.el7.noarch.rpm iwl5000-firmware-8.83.5.1_1-72.el7.noarch.rpm iwl5150-firmware-8.24.2.2-72.el7.noarch.rpm iwl6000-firmware-9.221.4.1-72.el7.noarch.rpm iwl6000g2a-firmware-17.168.5.3-72.el7.noarch.rpm iwl6000g2b-firmware-17.168.5.2-72.el7.noarch.rpm iwl6050-firmware-41.28.5.1-72.el7.noarch.rpm iwl7260-firmware-22.0.7.0-72.el7.noarch.rpm iwl7265-firmware-22.0.7.0-72.el7.noarch.rpm linux-firmware-20190429-72.gitddde598.el7.noarch.rpm Red Hat Enterprise Linux Server (v. 7): Source: linux-firmware-20190429-72.gitddde598.el7.src.rpm noarch: iwl100-firmware-39.31.5.1-72.el7.noarch.rpm iwl1000-firmware-39.31.5.1-72.el7.noarch.rpm iwl105-firmware-18.168.6.1-72.el7.noarch.rpm iwl135-firmware-18.168.6.1-72.el7.noarch.rpm iwl2000-firmware-18.168.6.1-72.el7.noarch.rpm iwl2030-firmware-18.168.6.1-72.el7.noarch.rpm iwl3160-firmware-22.0.7.0-72.el7.noarch.rpm iwl3945-firmware-15.32.2.9-72.el7.noarch.rpm iwl4965-firmware-228.61.2.24-72.el7.noarch.rpm iwl5000-firmware-8.83.5.1_1-72.el7.noarch.rpm iwl5150-firmware-8.24.2.2-72.el7.noarch.rpm iwl6000-firmware-9.221.4.1-72.el7.noarch.rpm iwl6000g2a-firmware-17.168.5.3-72.el7.noarch.rpm iwl6000g2b-firmware-17.168.5.2-72.el7.noarch.rpm iwl6050-firmware-41.28.5.1-72.el7.noarch.rpm iwl7260-firmware-22.0.7.0-72.el7.noarch.rpm iwl7265-firmware-22.0.7.0-72.el7.noarch.rpm linux-firmware-20190429-72.gitddde598.el7.noarch.rpm Red Hat Enterprise Linux Workstation (v.7): Source: linux-firmware-20190429-72.gitddde598.el7.src.rpm noarch: iwl100-firmware-39.31.5.1-72.el7.noarch.rpm iwl1000-firmware-39.31.5.1-72.el7.noarch.rpm iwl105-firmware-18.168.6.1-72.el7.noarch.rpm iwl135-firmware-18.168.6.1-72.el7.noarch.rpm iwl2000-firmware-18.168.6.1-72.el7.noarch.rpm iwl2030-firmware-18.168.6.1-72.el7.noarch.rpm iwl3160-firmware-22.0.7.0-72.el7.noarch.rpm iwl3945-firmware-15.32.2.9-72.el7.noarch.rpm iwl4965-firmware-228.61.2.24-72.el7.noarch.rpm iwl5000-firmware-8.83.5.1_1-72.el7.noarch.rpm iwl5150-firmware-8.24.2.2-72.el7.noarch.rpm iwl6000-firmware-9.221.4.1-72.el7.noarch.rpm iwl6000g2a-firmware-17.168.5.3-72.el7.noarch.rpm iwl6000g2b-firmware-17.168.5.2-72.el7.noarch.rpm iwl6050-firmware-41.28.5.1-72.el7.noarch.rpm iwl7260-firmware-22.0.7.0-72.el7.noarch.rpm iwl7265-firmware-22.0.7.0-72.el7.noarch.rpm linux-firmware-20190429-72.gitddde598.el7.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-5383 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXUl4n9zjgjWX9erEAQhAkw/+KcXoF0PnrjblvVm7NoR+6+Ap/0Q/ZA76 Q/lTMgCH2fhDPQov/S6l0uzlvrxzjcN2uQW/mM/XvaKgHX316q1Byj/ul74pfLGE ZfsmAfPeFy4YYSMOnzeFiE8lzbzM203JpiGCC0wS8Mm+oz13Bn6gwkZI3P3R4m3l LvPZ8AjMWXSRbdNDsxO+PONz9lsNQEEDspUKvdy3x2omdNCt8QPp1gIsP8lKM8g1 KIkJCwE0OkUrYOm9KEU3kNM1Nifx8LNjC+bdLMEgXMDtQiDdF085BrnXm10HYTAy DuGsE5Htep5balUiMOcR/Y4rb4r/fWfyRQNWG4H0RIduOCBTIDIcj3L/yKo/OU+t 15fe/S8OS14F8v2fsNEdrmmdFK12WiRzNozD/ZBbBklorTMvCrFrhQ9ZDIlD2ue/ RyoF4Zz5sCTP5NFQeYBEphU934UpHEc4VRZcrr4Rh86kS+0tWTrLZRE4Mx25jTjf TO72X8QlaGbOMtoErnZVmTVPUAJJMrZ5WBzrTZFOJrtnPsMAccvbNdfp/Ky30blh FHTMAVsVkZoRw8zayr8mSm3xCIY7B56hM0Ss42RSqO1f9KDeHAtbaVf1f4fuMr4E uZjw2Ma15KdNAGoOLgS941af276a9jRbHPrAmr3JWcTQb9osZFeoMcOOkikZgXtW hT1DU8n0QFA=F9to -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Aug 06, 2019
Red Hat
100
security advisoryimportantSUSESUSE: 2019:0427-2 Important: Bluetooth Key Exchange Fix for kernel-firmware
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:0427-2 Rating: important References: #1104301 Cross-References: CVE-2018-5383 Affected Products: SUSE Linux Enterprise Server for SAP 12-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kernel-firmware fixes the following issues: Security issue fixed: - CVE-2018-5383: Fixed an implementation issue in Bluetooth where the eliptic curve parameters were not sufficiently validated during Diffie-Hellman key exchange (bsc#1104301). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2019-427=1 Package List: - SUSE Linux Enterprise Server for SAP 12-SP1 (noarch): kernel-firmware-20160516git-10.16.1 ucode-amd-20160516git-10.16.1 References: https://www.suse.com/security/cve/CVE-2018-5383.html https://bugzilla.suse.com/1104301 _______________________________________________ sle-security-updates mailing list
Apr 27, 2019
SuSE
200
security advisorymoderatekey exchangeScientific Linux: SLSA-2016:0428-1 Moderate: libssh2 SSH Update
Moderate: libssh2 security update. Date: Thu, 10 Mar 2016 18:46:45 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Moderate: libssh2 on SL6.x, SL7.x i386/x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Moderate: libssh2 security update Advisory ID: SLSA-2016:0428-1 Issue Date: 2016-03-10 CVE Numbers: CVE-2016-0787 -- A type confusion issue was found in the way libssh2 generated ephemeral secrets for the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods. This would cause an SSHv2 Diffie-Hellman handshake to use significantly less secure random parameters. (CVE-2016-0787) After installing these updated packages, all running applications using libssh2 must be restarted for this update to take effect. -- SL6 x86_64 libssh2-1.4.2-2.el6_7.1.i686.rpm libssh2-1.4.2-2.el6_7.1.x86_64.rpm libssh2-debuginfo-1.4.2-2.el6_7.1.i686.rpm libssh2-debuginfo-1.4.2-2.el6_7.1.x86_64.rpm libssh2-devel-1.4.2-2.el6_7.1.i686.rpm libssh2-devel-1.4.2-2.el6_7.1.x86_64.rpm libssh2-docs-1.4.2-2.el6_7.1.x86_64.rpm i386 libssh2-1.4.2-2.el6_7.1.i686.rpm libssh2-debuginfo-1.4.2-2.el6_7.1.i686.rpm libssh2-devel-1.4.2-2.el6_7.1.i686.rpm libssh2-docs-1.4.2-2.el6_7.1.i686.rpm SL7 x86_64 libssh2-1.4.3-10.el7_2.1.i686.rpm libssh2-1.4.3-10.el7_2.1.x86_64.rpm libssh2-debuginfo-1.4.3-10.el7_2.1.i686.rpm libssh2-debuginfo-1.4.3-10.el7_2.1.x86_64.rpm libssh2-devel-1.4.3-10.el7_2.1.i686.rpm libssh2-devel-1.4.3-10.el7_2.1.x86_64.rpm noarch libssh2-docs-1.4.3-10.el7_2.1.noarch.rpm - Scientific Linux Development Team . A new libssh2 security update has been released for Scientific Linux to fix vulnerabilities. Users must update promptly to safeguard their systems against threats.. libssh2 Security Update, Scientific Linux Advisory, Moderate Security Issue. . LinuxSecurity.com Team
Mar 10, 2016
Scientific Linux
200
security advisorymoderateencryptionScientific Linux: SLSA-2015:1185-1 Moderate nss TLS Key Issue
Moderate: nss security update. Date: Mon, 29 Jun 2015 22:39:44 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: Security ERRATA Moderate: nss on SL6.x, SL7.x i386/x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Moderate: nss security update Advisory ID: SLSA-2015:1185-1 Issue Date: 2015-06-25 CVE Numbers: CVE-2015-4000 -- A flaw was found in the way the TLS protocol composes the Diffie-Hellman (DH) key exchange. A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic. (CVE-2015-4000) Note: This update forces the TLS/SSL client implementation in NSS to reject DH key sizes below 768 bits, which prevents sessions to be downgraded to export-grade keys. Future updates may raise this limit to 1024 bits. The nss and nss-util packages have been upgraded to upstream versions 3.19.1. The upgraded versions provide a number of bug fixes and enhancements over the previous versions. -- SL6 x86_64 nss-3.19.1-3.el6_6.i686.rpm nss-3.19.1-3.el6_6.x86_64.rpm nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.x86_64.rpm nss-sysinit-3.19.1-3.el6_6.x86_64.rpm nss-tools-3.19.1-3.el6_6.x86_64.rpm nss-util-3.19.1-1.el6_6.i686.rpm nss-util-3.19.1-1.el6_6.x86_64.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.x86_64.rpm nss-devel-3.19.1-3.el6_6.i686.rpm nss-devel-3.19.1-3.el6_6.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el6_6.i686.rpm nss-pkcs11-devel-3.19.1-3.el6_6.x86_64.rpm nss-util-devel-3.19.1-1.el6_6.i686.rpm nss-util-devel-3.19.1-1.el6_6.x86_64.rpm i386 nss-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-sysinit-3.19.1-3.el6_6.i686.rpm nss-tools-3.19.1-3.el6_6.i686.rpm nss-util-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-devel-3.19.1-3.el6_6.i686.rpm nss-pkcs11-devel-3.19.1-3.el6_6.i686.rpm nss-util-devel-3.19.1-1.el6_6.i686.rpm SL7 x86_64 nss-3.19.1-3.el7_1.i686.rpm nss-3.19.1-3.el7_1.x86_64.rpm nss-debuginfo-3.19.1-3.el7_1.i686.rpm nss-debuginfo-3.19.1-3.el7_1.x86_64.rpm nss-sysinit-3.19.1-3.el7_1.x86_64.rpm nss-tools-3.19.1-3.el7_1.x86_64.rpm nss-util-3.19.1-1.el7_1.i686.rpm nss-util-3.19.1-1.el7_1.x86_64.rpm nss-util-debuginfo-3.19.1-1.el7_1.i686.rpm nss-util-debuginfo-3.19.1-1.el7_1.x86_64.rpm nss-devel-3.19.1-3.el7_1.i686.rpm nss-devel-3.19.1-3.el7_1.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el7_1.i686.rpm nss-pkcs11-devel-3.19.1-3.el7_1.x86_64.rpm nss-util-devel-3.19.1-1.el7_1.i686.rpm nss-util-devel-3.19.1-1.el7_1.x86_64.rpm - Scientific Linux Development Team . Recent updates address a moderate NSS security vulnerability affecting TLS key exchange in Scientific Linux, urging users to apply patches swiftly for enhanced security. nss Security Update, Scientific Linux Update, TLS Key Exchange Fix. . LinuxSecurity.com Team
Jun 29, 2015
Scientific Linux
200
security advisorymoderateupdateScientific Linux: 2015-1072-1 Moderate: OpenSSL Key Exchange Risk
Moderate: openssl security update. Date: Fri, 5 Jun 2015 16:48:46 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Moderate: openssl on SL6.x, SL7.x i386/x86_64 MIME-Version: 1.0 Synopsis: Moderate: openssl security update Advisory ID: SLSA-2015:1072-1 Issue Date: 2015-06-04 CVE Numbers: CVE-2015-4000 -- A flaw was found in the way the TLS protocol composes the Diffie-Hellman (DH) key exchange. A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic. (CVE-2015-4000) Note: This update forces the TLS/SSL client implementation in OpenSSL to reject DH key sizes below 768 bits, which prevents sessions to be downgraded to export-grade keys. Future updates may raise this limit to 1024 bits. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. -- SL6 x86_64 openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.x86_64.rpm openssl-perl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-static-1.0.1e-30.el6_6.9.x86_64.rpm i386 openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-perl-1.0.1e-30.el6_6.9.i686.rpm openssl-static-1.0.1e-30.el6_6.9.i686.rpm SL7 x86_64 openssl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.6.i686.rpm openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.6.i686.rpm openssl-devel-1.0.1e-42.el7_1.6.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-static-1.0.1e-42.el7_1.6.i686.rpm openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm - Scientific LinuxDevelopment Team . Timely revision for openssl to tackle man-in-the-middle vulnerabilities in Scientific Linux versions 6 and 7.. openssl Update, Scientific Linux Advisory, Moderate Security Fix. . LinuxSecurity.com Team
Jun 05, 2015
Scientific Linux
98
security advisorymoderatesecurity issueRed Hat 6/7: RHSA-2015:1072-01 Moderate: openssl Man-in-the-Middle Risk
Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openssl security update Advisory ID: RHSA-2015:1072-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:1072.html Issue date: 2015-06-04 CVE Names: CVE-2015-4000 ==================================================================== 1. Summary: Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise LinuxWorkstation Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library. A flaw was found in the way the TLS protocol composes the Diffie-Hellman (DH) key exchange. A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic. (CVE-2015-4000) Note: This update forces the TLS/SSL client implementation in OpenSSL to reject DH key sizes below 768 bits, which prevents sessions to be downgraded to export-grade keys. Future updates may raise this limit to 1024 bits. All openssl users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1223211 - CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: openssl-1.0.1e-30.el6_6.9.src.rpm i386: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm x86_64: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v.6): i386: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-perl-1.0.1e-30.el6_6.9.i686.rpm openssl-static-1.0.1e-30.el6_6.9.i686.rpm x86_64: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.x86_64.rpm openssl-perl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-static-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: openssl-1.0.1e-30.el6_6.9.src.rpm x86_64: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): x86_64: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.x86_64.rpm openssl-perl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-static-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: openssl-1.0.1e-30.el6_6.9.src.rpm i386: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm ppc64: openssl-1.0.1e-30.el6_6.9.ppc.rpm openssl-1.0.1e-30.el6_6.9.ppc64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.ppc.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.ppc64.rpm openssl-devel-1.0.1e-30.el6_6.9.ppc.rpm openssl-devel-1.0.1e-30.el6_6.9.ppc64.rpm s390x: openssl-1.0.1e-30.el6_6.9.s390.rpm openssl-1.0.1e-30.el6_6.9.s390x.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.s390.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.s390x.rpm openssl-devel-1.0.1e-30.el6_6.9.s390.rpm openssl-devel-1.0.1e-30.el6_6.9.s390x.rpm x86_64: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Server Optional(v. 6): i386: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-perl-1.0.1e-30.el6_6.9.i686.rpm openssl-static-1.0.1e-30.el6_6.9.i686.rpm ppc64: openssl-debuginfo-1.0.1e-30.el6_6.9.ppc64.rpm openssl-perl-1.0.1e-30.el6_6.9.ppc64.rpm openssl-static-1.0.1e-30.el6_6.9.ppc64.rpm s390x: openssl-debuginfo-1.0.1e-30.el6_6.9.s390x.rpm openssl-perl-1.0.1e-30.el6_6.9.s390x.rpm openssl-static-1.0.1e-30.el6_6.9.s390x.rpm x86_64: openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-perl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-static-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: openssl-1.0.1e-30.el6_6.9.src.rpm i386: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm x86_64: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): i386: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-perl-1.0.1e-30.el6_6.9.i686.rpm openssl-static-1.0.1e-30.el6_6.9.i686.rpm x86_64: openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-perl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-static-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Client (v. 7): Source: openssl-1.0.1e-42.el7_1.6.src.rpm x86_64: openssl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.6.i686.rpm openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.6.i686.rpm openssl-devel-1.0.1e-42.el7_1.6.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-static-1.0.1e-42.el7_1.6.i686.rpm openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm Red HatEnterprise Linux ComputeNode (v. 7): Source: openssl-1.0.1e-42.el7_1.6.src.rpm x86_64: openssl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.6.i686.rpm openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.6.i686.rpm openssl-devel-1.0.1e-42.el7_1.6.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-static-1.0.1e-42.el7_1.6.i686.rpm openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: openssl-1.0.1e-42.el7_1.6.src.rpm ppc64: openssl-1.0.1e-42.el7_1.6.ppc64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.ppc.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.ppc64.rpm openssl-devel-1.0.1e-42.el7_1.6.ppc.rpm openssl-devel-1.0.1e-42.el7_1.6.ppc64.rpm openssl-libs-1.0.1e-42.el7_1.6.ppc.rpm openssl-libs-1.0.1e-42.el7_1.6.ppc64.rpm s390x: openssl-1.0.1e-42.el7_1.6.s390x.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.s390.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.s390x.rpm openssl-devel-1.0.1e-42.el7_1.6.s390.rpm openssl-devel-1.0.1e-42.el7_1.6.s390x.rpm openssl-libs-1.0.1e-42.el7_1.6.s390.rpm openssl-libs-1.0.1e-42.el7_1.6.s390x.rpm x86_64: openssl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.6.i686.rpm openssl-devel-1.0.1e-42.el7_1.6.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.6.i686.rpm openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: openssl-1.0.1e-42.ael7b_1.6.src.rpm ppc64le: openssl-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-debuginfo-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-devel-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-libs-1.0.1e-42.ael7b_1.6.ppc64le.rpm Red Hat Enterprise Linux Server Optional (v.7): ppc64: openssl-debuginfo-1.0.1e-42.el7_1.6.ppc.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.ppc64.rpm openssl-perl-1.0.1e-42.el7_1.6.ppc64.rpm openssl-static-1.0.1e-42.el7_1.6.ppc.rpm openssl-static-1.0.1e-42.el7_1.6.ppc64.rpm s390x: openssl-debuginfo-1.0.1e-42.el7_1.6.s390.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.s390x.rpm openssl-perl-1.0.1e-42.el7_1.6.s390x.rpm openssl-static-1.0.1e-42.el7_1.6.s390.rpm openssl-static-1.0.1e-42.el7_1.6.s390x.rpm x86_64: openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-static-1.0.1e-42.el7_1.6.i686.rpm openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64le: openssl-debuginfo-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-perl-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-static-1.0.1e-42.ael7b_1.6.ppc64le.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: openssl-1.0.1e-42.el7_1.6.src.rpm x86_64: openssl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.6.i686.rpm openssl-devel-1.0.1e-42.el7_1.6.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.6.i686.rpm openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-static-1.0.1e-42.el7_1.6.i686.rpm openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2015-4000 https://access.redhat.com/security/updates/classification#moderate https://access.redhat.com/articles/1456263 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVcI/tXlSAg2UNWIIRAjkVAKCBQzufGAQrAiZwwGvjXbepo/c2oACglmdg cY5Kwol2YDkKtcLO2F/XsEc=/Lzq -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Jun 04, 2015
Red Hat
98
security advisoryRed Hatmoderate severityRed Hat 6 & 7 RHSA-2015:1072-01 Moderate: OpenSSL Man-In-The-Middle
Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openssl security update Advisory ID: RHSA-2015:1072-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:1072.html Issue date: 2015-06-04 CVE Names: CVE-2015-4000 ==================================================================== 1. Summary: Updated openssl packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3.Description: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library. A flaw was found in the way the TLS protocol composes the Diffie-Hellman (DH) key exchange. A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic. (CVE-2015-4000) Note: This update forces the TLS/SSL client implementation in OpenSSL to reject DH key sizes below 768 bits, which prevents sessions to be downgraded to export-grade keys. Future updates may raise this limit to 1024 bits. All openssl users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1223211 - CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: openssl-1.0.1e-30.el6_6.9.src.rpm i386: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm x86_64: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v.6): i386: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-perl-1.0.1e-30.el6_6.9.i686.rpm openssl-static-1.0.1e-30.el6_6.9.i686.rpm x86_64: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.x86_64.rpm openssl-perl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-static-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: openssl-1.0.1e-30.el6_6.9.src.rpm x86_64: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): x86_64: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.x86_64.rpm openssl-perl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-static-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: openssl-1.0.1e-30.el6_6.9.src.rpm i386: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm ppc64: openssl-1.0.1e-30.el6_6.9.ppc.rpm openssl-1.0.1e-30.el6_6.9.ppc64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.ppc.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.ppc64.rpm openssl-devel-1.0.1e-30.el6_6.9.ppc.rpm openssl-devel-1.0.1e-30.el6_6.9.ppc64.rpm s390x: openssl-1.0.1e-30.el6_6.9.s390.rpm openssl-1.0.1e-30.el6_6.9.s390x.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.s390.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.s390x.rpm openssl-devel-1.0.1e-30.el6_6.9.s390.rpm openssl-devel-1.0.1e-30.el6_6.9.s390x.rpm x86_64: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Server Optional(v. 6): i386: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-perl-1.0.1e-30.el6_6.9.i686.rpm openssl-static-1.0.1e-30.el6_6.9.i686.rpm ppc64: openssl-debuginfo-1.0.1e-30.el6_6.9.ppc64.rpm openssl-perl-1.0.1e-30.el6_6.9.ppc64.rpm openssl-static-1.0.1e-30.el6_6.9.ppc64.rpm s390x: openssl-debuginfo-1.0.1e-30.el6_6.9.s390x.rpm openssl-perl-1.0.1e-30.el6_6.9.s390x.rpm openssl-static-1.0.1e-30.el6_6.9.s390x.rpm x86_64: openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-perl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-static-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: openssl-1.0.1e-30.el6_6.9.src.rpm i386: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm x86_64: openssl-1.0.1e-30.el6_6.9.i686.rpm openssl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-devel-1.0.1e-30.el6_6.9.i686.rpm openssl-devel-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): i386: openssl-debuginfo-1.0.1e-30.el6_6.9.i686.rpm openssl-perl-1.0.1e-30.el6_6.9.i686.rpm openssl-static-1.0.1e-30.el6_6.9.i686.rpm x86_64: openssl-debuginfo-1.0.1e-30.el6_6.9.x86_64.rpm openssl-perl-1.0.1e-30.el6_6.9.x86_64.rpm openssl-static-1.0.1e-30.el6_6.9.x86_64.rpm Red Hat Enterprise Linux Client (v. 7): Source: openssl-1.0.1e-42.el7_1.6.src.rpm x86_64: openssl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.6.i686.rpm openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.6.i686.rpm openssl-devel-1.0.1e-42.el7_1.6.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-static-1.0.1e-42.el7_1.6.i686.rpm openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm Red HatEnterprise Linux ComputeNode (v. 7): Source: openssl-1.0.1e-42.el7_1.6.src.rpm x86_64: openssl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.6.i686.rpm openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.6.i686.rpm openssl-devel-1.0.1e-42.el7_1.6.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-static-1.0.1e-42.el7_1.6.i686.rpm openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: openssl-1.0.1e-42.el7_1.6.src.rpm ppc64: openssl-1.0.1e-42.el7_1.6.ppc64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.ppc.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.ppc64.rpm openssl-devel-1.0.1e-42.el7_1.6.ppc.rpm openssl-devel-1.0.1e-42.el7_1.6.ppc64.rpm openssl-libs-1.0.1e-42.el7_1.6.ppc.rpm openssl-libs-1.0.1e-42.el7_1.6.ppc64.rpm s390x: openssl-1.0.1e-42.el7_1.6.s390x.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.s390.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.s390x.rpm openssl-devel-1.0.1e-42.el7_1.6.s390.rpm openssl-devel-1.0.1e-42.el7_1.6.s390x.rpm openssl-libs-1.0.1e-42.el7_1.6.s390.rpm openssl-libs-1.0.1e-42.el7_1.6.s390x.rpm x86_64: openssl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.6.i686.rpm openssl-devel-1.0.1e-42.el7_1.6.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.6.i686.rpm openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: openssl-1.0.1e-42.ael7b_1.6.src.rpm ppc64le: openssl-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-debuginfo-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-devel-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-libs-1.0.1e-42.ael7b_1.6.ppc64le.rpm Red Hat Enterprise Linux Server Optional (v.7): ppc64: openssl-debuginfo-1.0.1e-42.el7_1.6.ppc.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.ppc64.rpm openssl-perl-1.0.1e-42.el7_1.6.ppc64.rpm openssl-static-1.0.1e-42.el7_1.6.ppc.rpm openssl-static-1.0.1e-42.el7_1.6.ppc64.rpm s390x: openssl-debuginfo-1.0.1e-42.el7_1.6.s390.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.s390x.rpm openssl-perl-1.0.1e-42.el7_1.6.s390x.rpm openssl-static-1.0.1e-42.el7_1.6.s390.rpm openssl-static-1.0.1e-42.el7_1.6.s390x.rpm x86_64: openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-static-1.0.1e-42.el7_1.6.i686.rpm openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64le: openssl-debuginfo-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-perl-1.0.1e-42.ael7b_1.6.ppc64le.rpm openssl-static-1.0.1e-42.ael7b_1.6.ppc64le.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: openssl-1.0.1e-42.el7_1.6.src.rpm x86_64: openssl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.6.i686.rpm openssl-devel-1.0.1e-42.el7_1.6.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.6.i686.rpm openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: openssl-debuginfo-1.0.1e-42.el7_1.6.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.6.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.6.x86_64.rpm openssl-static-1.0.1e-42.el7_1.6.i686.rpm openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-4000 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/articles/1456263 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright2015 Red Hat, Inc. . New OpenSSL updates released for Red Hat Enterprise Linux versions 6 and 7 to address a significant security vulnerability.. openssL Update, Red Hat Advisory, Linux Security Patch, Enterprise Linux Fix. . LinuxSecurity.com Team
Jun 04, 2015
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!