English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 148472 CVE descriptions
and 72306 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2005-67
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 22 Jun 2005
 Last revised: 22 Jun 2005

 Package: openssl

 Summary: Private key leak

 More information:
    The OpenSSL Project is a collaborative effort to develop a robust,
    commercial-grade, full-featured Open Source toolkit implementing the
    Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1)
    protocols as well as a full-strength general purpose cryptography library.

    The OpenSSL has a private key information leak on Intel Hyper-Threading technology.

 Impact:
    This vulnerability may allow local users to gain a private key information.

 Affected Products:
    - Turbolinux Appliance Server 1.0 Hosting Edition
    - Turbolinux Appliance Server 1.0 Workgroup Edition
    - Turbolinux 10 Server
    - Turbolinux Home
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop
    - Turbolinux 8 Server
    - Turbolinux 8 Workstation
    - Turbolinux 7 Server
    - Turbolinux 7 Workstation

 Solution:
    Please use the turbopkg (zabom) tool to apply the update. 
 ---------------------------------------------
 [Turbolinux 10 Server, Turbolinux 10 Desktop, Turbolinux 10 F..., 
  Turbolinux Home]
 # turbopkg
 or
 # zabom -u openssl openssl-compat openssl-devel

 [other]
 # turbopkg
 or
 # zabom update openssl openssl-devel
 ---------------------------------------------


 <Turbolinux Appliance Server 1.0 Hosting Edition>

   Source Packages
   Size: MD5

   openssl-0.9.6m-3.src.rpm
      2272425 bd6ae2494be8ba4f661e144c171f9212

   Binary Packages
   Size: MD5

   openssl-0.9.6m-3.i586.rpm
      1368343 e1539ba52d4ba7c744cc6758c2cba1b4
   openssl-devel-0.9.6m-3.i586.rpm
      1158184 01780e53d6ec3bc427777937af82fb62

 <Turbolinux Appliance Server 1.0 Workgroup Edition>

   Source Packages
   Size: MD5

   openssl-0.9.6m-3.src.rpm
      2272425 4d8ee76c46152797f9272fe24c2bb2c3

   Binary Packages
   Size: MD5

   openssl-0.9.6m-3.i586.rpm
      1368502 babfdf2f3a781933acb17e30b3e0772a
   openssl-devel-0.9.6m-3.i586.rpm
      1159532 753fc7f9b7ac61e82089a49f0f9ebbc9

 <Turbolinux 10 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/openssl-0.9.7d-4.src.rpm
      2805420 c3c7259998efcdc8a845e3f402c9d0e9
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/openssl-compat-0.9.6m-7.src.rpm
      2272497 9c524a64db8766638711df538e295e53

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/openssl-0.9.7d-4.i586.rpm
      1217130 12946ec1e937bfbc9a5616c00514a426
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/openssl-compat-0.9.6m-7.i586.rpm
       755601 ec864b95bf212ca45519e7abcd0faba6
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/openssl-devel-0.9.7d-4.i586.rpm
      1480975 7cc632b4ef81f9322bbd2a8ece63d0c6

 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/openssl-0.9.7d-4.src.rpm
      2805420 5f6cfe4c8cfd411410f46afe8189809c
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/openssl-compat-0.9.6m-7.src.rpm
      2272497 b63c3c41a62d2d2f56f9daf553830a37

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/openssl-0.9.7d-4.i586.rpm
      1220065 5c34b804aa9a90489ca650fe085c0906
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/openssl-compat-0.9.6m-7.i586.rpm
       754961 000f202c6e9691a7eb418089b5b98df8
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/openssl-devel-0.9.7d-4.i586.rpm
      1481488 e31903d04310e1fd674a76c125b83f04

 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/openssl-0.9.6m-3.src.rpm
      2272425 3bbc791ca6ecb48677a7307470b09cb9

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/openssl-0.9.6m-3.i586.rpm
      1368559 d8ff7765a27e0c07288252ee5d83f154
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/openssl-devel-0.9.6m-3.i586.rpm
      1158785 745807dce45eceb0df0790a7601f8a69

 <Turbolinux 8 Workstation>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/openssl-0.9.6m-3.src.rpm
      2272425 eac446b47a1026cab604e086cd0f5db5

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/openssl-0.9.6m-3.i586.rpm
      1368261 25d419a9ae147d6da703906f89045ee9
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/openssl-devel-0.9.6m-3.i586.rpm
      1157861 197339f3a109da2dce241846c3e95f24

 <Turbolinux 7 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/openssl-0.9.6m-3.src.rpm
      2272425 09e9a9baafcaeaa5d584005f8cb18b4c

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/openssl-0.9.6m-3.i586.rpm
      1337032 1f84bdf96f4f770274ed2cce281ed2aa
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/openssl-devel-0.9.6m-3.i586.rpm
      1141207 0cb1a24b9a7c44e860c964ef0cdb1245

 <Turbolinux 7 Workstation>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/SRPMS/openssl-0.9.6m-3.src.rpm
      2272425 e607c161120edacf9f73d6d819433b89

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/openssl-0.9.6m-3.i586.rpm
      1336162 a4fd2299f01c00650152194e410659b8
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/openssl-devel-0.9.6m-3.i586.rpm
      1141660 e578784ed3f9a9be10916d2706022852


 References:

 CVE
   [CAN-2005-0109]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0109

 --------------------------------------------------------------------------
 Revision History
    22 Jun 2005 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2005 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFCuOhYK0LzjOqIJMwRAipaAKCpEExb8lGSkUzydWseHgNrm415LQCfT/dI
I4JvfkgcUCLYlx7y2t+GY+0=
=0rAe
-----END PGP SIGNATURE-----

New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe

© 1998-2019 E-Soft Inc. All rights reserved.