Test Kennung:	1.3.6.1.4.1.25623.1.0.67042
Kategorie:	Slackware Local Security Checks
Titel:	Slackware: Security Advisory (SSA:2010-060-02)
Zusammenfassung:	The remote host is missing an update for the 'openssl' package(s) announced via the SSA:2010-060-02 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'openssl' package(s) announced via the SSA:2010-060-02 advisory. Vulnerability Insight: New openssl packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [link moved to references] [link moved to references] [link moved to references] [link moved to references] [link moved to references] [link moved to references] Here are the details from the Slackware 13.0 ChangeLog: +--------------------------+ patches/packages/openssl-0.9.8m-i486-1_slack13.0.txz: Upgraded. This OpenSSL update contains some security related bugfixes. For more information, see the included CHANGES and NEWS files, and: [link moved to references] [link moved to references] [link moved to references] [link moved to references] [link moved to references] [link moved to references] (* Security fix *) patches/packages/openssl-solibs-0.9.8m-i486-1_slack13.0.txz: Upgraded. +--------------------------+ Affected Software/OS: 'openssl' package(s) on Slackware 11.0, Slackware 12.0, Slackware 12.1, Slackware 12.2, Slackware 13.0, Slackware current. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1678 31026 http://secunia.com/advisories/31026 31416 http://secunia.com/advisories/31416 31681 http://www.securityfocus.com/bid/31681 31692 http://www.securityfocus.com/bid/31692 32222 http://secunia.com/advisories/32222 34219 http://secunia.com/advisories/34219 35264 http://secunia.com/advisories/35264 38761 http://secunia.com/advisories/38761 3981 http://securityreason.com/securityalert/3981 42724 http://secunia.com/advisories/42724 42733 http://secunia.com/advisories/42733 44183 http://secunia.com/advisories/44183 ADV-2008-2780 http://www.vupen.com/english/advisories/2008/2780 APPLE-SA-2008-10-09 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html FEDORA-2008-6393 https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html GLSA-200807-06 http://security.gentoo.org/glsa/glsa-200807-06.xml MDVSA-2009:124 http://www.mandriva.com/security/advisories?name=MDVSA-2009:124 RHSA-2009:1075 http://www.redhat.com/support/errata/RHSA-2009-1075.html SSA:2010-060-02 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049 SUSE-SR:2008:024 http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html USN-731-1 http://www.ubuntu.com/usn/USN-731-1 [openssl-dev] 20080512 possible memory leak in zlib compression http://marc.info/?l=openssl-dev&m=121060672602371&w=2 http://bugs.gentoo.org/show_bug.cgi?id=222643 http://support.apple.com/kb/HT3216 http://svn.apache.org/viewvc?view=rev&revision=654119 https://bugs.edge.launchpad.net/bugs/186339 https://bugs.edge.launchpad.net/bugs/224945 https://bugzilla.redhat.com/show_bug.cgi?id=447268 https://issues.apache.org/bugzilla/show_bug.cgi?id=44975 https://kb.bluecoat.com/index?page=content&id=SA50 openssl-libssl-dos(43948) https://exchange.xforce.ibmcloud.com/vulnerabilities/43948 oval:org.mitre.oval:def:9754 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9754 Common Vulnerability Exposure (CVE) ID: CVE-2009-1377 1022241 http://www.securitytracker.com/id?1022241 35001 http://www.securityfocus.com/bid/35001 35128 http://secunia.com/advisories/35128 35416 http://secunia.com/advisories/35416 35461 http://secunia.com/advisories/35461 35571 http://secunia.com/advisories/35571 35729 http://secunia.com/advisories/35729 36533 http://secunia.com/advisories/36533 37003 http://secunia.com/advisories/37003 38794 http://secunia.com/advisories/38794 38834 http://secunia.com/advisories/38834 ADV-2009-1377 http://www.vupen.com/english/advisories/2009/1377 ADV-2010-0528 http://www.vupen.com/english/advisories/2010/0528 GLSA-200912-01 http://security.gentoo.org/glsa/glsa-200912-01.xml HPSBMA02492 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 MDVSA-2009:120 http://www.mandriva.com/security/advisories?name=MDVSA-2009:120 NetBSD-SA2009-009 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc RHSA-2009:1335 http://www.redhat.com/support/errata/RHSA-2009-1335.html SSRT100079 SUSE-SR:2009:011 http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html USN-792-1 http://www.ubuntu.com/usn/USN-792-1 [openssl-dev] 20090516 [openssl.org #1930] [PATCH] DTLS record buffer limitation bug http://marc.info/?l=openssl-dev&m=124247675613888&w=2 [oss-security] 20090518 Two OpenSSL DTLS remote DoS http://www.openwall.com/lists/oss-security/2009/05/18/1 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates http://lists.vmware.com/pipermail/security-announce/2010/000082.html http://cvs.openssl.org/chngview?cn=18187 http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html https://launchpad.net/bugs/cve/2009-1377 oval:org.mitre.oval:def:6683 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683 oval:org.mitre.oval:def:9663 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663 Common Vulnerability Exposure (CVE) ID: CVE-2009-1378 8720 https://www.exploit-db.com/exploits/8720 [openssl-dev] 20090516 [openssl.org #1931] [PATCH] DTLS fragment handling memory leak http://marc.info/?l=openssl-dev&m=124247679213944&w=2 [openssl-dev] 20090518 Re: [openssl.org #1931] [PATCH] DTLS fragment handling memory leak http://marc.info/?l=openssl-dev&m=124263491424212&w=2 http://cvs.openssl.org/chngview?cn=18188 http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest https://launchpad.net/bugs/cve/2009-1378 oval:org.mitre.oval:def:11309 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309 oval:org.mitre.oval:def:7229 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229 Common Vulnerability Exposure (CVE) ID: CVE-2009-1379 35138 http://www.securityfocus.com/bid/35138 [oss-security] 20090518 Re: Two OpenSSL DTLS remote DoS http://www.openwall.com/lists/oss-security/2009/05/18/4 http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest https://launchpad.net/bugs/cve/2009-1379 openssl-dtls1retrievebufferedfragment-dos(50661) https://exchange.xforce.ibmcloud.com/vulnerabilities/50661 oval:org.mitre.oval:def:6848 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848 oval:org.mitre.oval:def:9744 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744 Common Vulnerability Exposure (CVE) ID: CVE-2009-3245 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html BugTraq ID: 38562 http://www.securityfocus.com/bid/38562 http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html HPdes Security Advisory: HPSBOV02540 http://marc.info/?l=bugtraq&m=127678688104458&w=2 HPdes Security Advisory: HPSBUX02517 http://marc.info/?l=bugtraq&m=127128920008563&w=2 HPdes Security Advisory: SSRT100058 http://www.mandriva.com/security/advisories?name=MDVSA-2010:076 http://packetstormsecurity.com/files/153392/ABB-HMI-Outdated-Software-Components.html http://marc.info/?l=openssl-cvs&m=126692180606861&w=2 http://marc.info/?l=openssl-cvs&m=126692159706582&w=2 http://marc.info/?l=openssl-cvs&m=126692170906712&w=2 https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11738 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6640 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9790 http://www.redhat.com/support/errata/RHSA-2010-0977.html http://www.redhat.com/support/errata/RHSA-2011-0896.html http://secunia.com/advisories/37291 http://secunia.com/advisories/39461 http://secunia.com/advisories/39932 SuSE Security Announcement: SUSE-SR:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html http://www.ubuntu.com/usn/USN-1003-1 http://www.vupen.com/english/advisories/2010/0839 http://www.vupen.com/english/advisories/2010/0916 http://www.vupen.com/english/advisories/2010/0933 http://www.vupen.com/english/advisories/2010/1216 Common Vulnerability Exposure (CVE) ID: CVE-2009-4355 Debian Security Information: DSA-1970 (Google Search) http://www.debian.org/security/2010/dsa-1970 http://www.mandriva.com/security/advisories?name=MDVSA-2010:022 http://www.openwall.com/lists/oss-security/2010/01/13/3 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11260 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12168 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6678 RedHat Security Advisories: RHSA-2010:0095 https://rhn.redhat.com/errata/RHSA-2010-0095.html http://secunia.com/advisories/38175 http://secunia.com/advisories/38181 http://secunia.com/advisories/38200 SuSE Security Announcement: SUSE-SA:2010:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html http://www.ubuntu.com/usn/USN-884-1 http://www.vupen.com/english/advisories/2010/0124
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.