openssl-0.9.8b-10.1AXS3.1

エラータID: AXSA:2009-13:01

Release date: 
Friday, January 23, 2009 - 12:18
Subject: 
openssl-0.9.8b-10.1AXS3.1
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for ppc
Asianux Server 3 for ia64
Asianux Server 3 for x86
Severity: 
High
Description: 

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols.
Bugs fixed:
CVE-2008-5077
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.

Solution: 

Update package and also update openssl package (openssl097a-0.9.7a-9AXS3.1 - AXSA:2009-12:01)

CVEs: 
CVE-2008-5077
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.


Additional Info: 

Please also update openssl097a-0.9.7a-9AXS3.1 - AXSA:2009-12:01 to fully fix this problem.

Download: 

SRPMS
  1. openssl-0.9.8b-10.1AXS3.1.src.rpm
    MD5: 721aeeae6a0501605803bd6d8b89fa2b
    SHA-256: 6a38b30ef9d84d0824301a8a7527af0f255e68c859ca726e9776d879029c890f
    Size: 2.74 MB

Asianux Server 3 for x86
  1. openssl-0.9.8b-10.1AXS3.1.i686.rpm
    MD5: 4d84720d3090304bf38aac8b90c1df1a
    SHA-256: 8b5d6aff72fb8a450761a4d8b455f0414d8dfd493523369d0a9216ad172c2282
    Size: 1.40 MB
  2. openssl-0.9.8b-10.1AXS3.1.i386.rpm
    MD5: a6f80293d9541aa23d83b6c3001d5ef9
    SHA-256: 24b779e581012271a6e3dce81676b1acdaaaac395dbbb8b468e50413e92fc3e6
    Size: 1.42 MB
  3. openssl-devel-0.9.8b-10.1AXS3.1.i386.rpm
    MD5: a7a2d4eb070e496dfb8a5c664f7a98df
    SHA-256: 54ec0d452eb0f557ab29b112476c65fbe62eb791ba79a1c714f110521c1048ea
    Size: 1.87 MB
  4. openssl-perl-0.9.8b-10.1AXS3.1.i386.rpm
    MD5: a5cfb8e0f7b5460e420fb97b46d3ae86
    SHA-256: 2787f274b4e75b5bdb386f2acc82e4ec84754f759579de5b8bd532e19be0af1a
    Size: 31.97 kB

Asianux Server 3 for x86_64
  1. openssl-0.9.8b-10.1AXS3.1.x86_64.rpm
    MD5: 8d5236e28f9b0dda6b858c631e4b8615
    SHA-256: bb74410c3d9fa8f85ecaf6eedfa61dcb0240221807ea65654f142a189414f3ba
    Size: 1.41 MB
  2. openssl-devel-0.9.8b-10.1AXS3.1.x86_64.rpm
    MD5: 61e4e4947c9c451b71b3638c2b9006e4
    SHA-256: 729cf273d52fe611ca75bbfff5823034a376557de5a5bdfdeea348b8c4fc9442
    Size: 1.86 MB
  3. openssl-perl-0.9.8b-10.1AXS3.1.x86_64.rpm
    MD5: 140fca31353fa49b04bda042046cf640
    SHA-256: 0f36fff9848e2a8bb18fb40c75eb3937074449bb7bc8cef3a5a5f73513b0c759
    Size: 32.18 kB