OpenCSW Bug Tracker

Project:

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0005268

[openssl_utils] upgrade

major

have not tried

2016-03-02 02:07

2016-03-02 09:06

Reporter

briandking

View Status

public

Assigned To

Priority

normal

Resolution

fixed

Status

closed

Summary

0005268: OpenSSL Security Vulnerability requires upgrade to 1.0.1s

Description

Original release date: March 01, 2016
OpenSSL has released updates to address vulnerabilities in prior versions. Exploitation of some of these vulnerabilities may allow a remote attacker to obtain sensitive information. Updates available include:
• OpenSSL 1.0.2g for 1.0.2 users
• OpenSSL 1.0.1s for 1.0.1 users
Users and administrators are encouraged to review the OpenSSL Security Advisory and apply the necessary updates.

https://www.openssl.org/news/secadv/20160301.txt [^]
https://www.us-cert.gov/ncas/current-activity/2016/03/01/OpenSSL-Releases-Security-Advisory [^]
https://isc.sans.edu/forums/diary/OpenSSL+Update+Released/20785/ [^]

Additional Information

Relationships