ID de Prueba:	1.3.6.1.4.1.25623.1.1.13.2019.254.03
Categoría:	Slackware Local Security Checks
Título:	Slackware: Security Advisory (SSA:2019-254-03)
Resumen:	The remote host is missing an update for the 'openssl' package(s) announced via the SSA:2019-254-03 advisory.
Descripción:	Summary: The remote host is missing an update for the 'openssl' package(s) announced via the SSA:2019-254-03 advisory. Vulnerability Insight: New openssl packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/openssl-1.0.2t-i586-1_slack14.2.txz: Upgraded. This update fixes low severity security issues: Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey Compute ECC cofactors if not provided during EC_GROUP construction For more information, see: [links moved to references] (* Security fix *) patches/packages/openssl-solibs-1.0.2t-i586-1_slack14.2.txz: Upgraded. +--------------------------+ Affected Software/OS: 'openssl' package(s) on Slackware 14.2, Slackware current. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-1547 Bugtraq: 20190912 [slackware-security] openssl (SSA:2019-254-03) (Google Search) https://seclists.org/bugtraq/2019/Sep/25 Bugtraq: 20191001 [SECURITY] [DSA 4539-1] openssl security update (Google Search) https://seclists.org/bugtraq/2019/Oct/1 Bugtraq: 20191001 [SECURITY] [DSA 4540-1] openssl1.0 security update (Google Search) https://seclists.org/bugtraq/2019/Oct/0 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=21c856b75d81eff61aa63b4f036bb64a85bf6d46 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=30c22fa8b1d840036b8e203585738df62a03cec8 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7c1709c2da5414f5b6133d00a03fc8c5bf996c7a https://security.netapp.com/advisory/ntap-20190919-0002/ https://security.netapp.com/advisory/ntap-20200122-0002/ https://security.netapp.com/advisory/ntap-20200416-0003/ https://support.f5.com/csp/article/K73422160?utm_source=f5support&utm_medium=RSS https://www.openssl.org/news/secadv/20190910.txt https://www.tenable.com/security/tns-2019-08 https://www.tenable.com/security/tns-2019-09 Debian Security Information: DSA-4539 (Google Search) https://www.debian.org/security/2019/dsa-4539 Debian Security Information: DSA-4540 (Google Search) https://www.debian.org/security/2019/dsa-4540 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/ https://security.gentoo.org/glsa/201911-04 http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html https://arxiv.org/abs/1909.01785 https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpujan2020.html https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html SuSE Security Announcement: openSUSE-SU-2019:2158 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html SuSE Security Announcement: openSUSE-SU-2019:2189 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html SuSE Security Announcement: openSUSE-SU-2019:2268 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html SuSE Security Announcement: openSUSE-SU-2019:2269 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html https://usn.ubuntu.com/4376-1/ https://usn.ubuntu.com/4376-2/ https://usn.ubuntu.com/4504-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-1563 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=08229ad838c50f644d7e928e2eef147b4308ad64 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=631f94db0065c78181ca9ba5546ebc8bb3884b97 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e21f8cf78a125cd3c8c0d1a1a6c8bb0b901f893f https://support.f5.com/csp/article/K97324400?utm_source=f5support&utm_medium=RSS
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.