-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2009:238
http://www.mandriva.com/security/
_______________________________________________________________________
Package : openssl
Date : September 21, 2009
Affected: 2008.1, 2009.0, Enterprise Server 5.0
_______________________________________________________________________
Problem Description:
Multiple vulnerabilities was discovered and corrected in openssl:
Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment
function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote
attackers to cause a denial of service (openssl s_client crash)
and possibly have unspecified other impact via a DTLS packet, as
demonstrated by a packet from a server that uses a crafted server
certificate (CVE-2009-1379).
ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to
cause a denial of service (NULL pointer dereference and daemon crash)
via a DTLS ChangeCipherSpec packet that occurs before ClientHello
(CVE-2009-1386).
The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c
in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a
denial of service (NULL pointer dereference and daemon crash) via
an out-of-sequence DTLS handshake message, related to a fragment
bug. (CVE-2009-1387)
The NSS library library before 3.12.3, as used in Firefox; GnuTLS
before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other
products support MD2 with X.509 certificates, which might allow
remote attackers to spooof certificates by using MD2 design flaws
to generate a hash collision in less than brute-force time. NOTE:
the scope of this issue is currently limited because the amount of
computation required is still large (CVE-2009-2409).
This update provides a solution to these vulnerabilities.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1387
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2409
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2008.1:
4413a38da4754d54fc161e3c06b81c72 2008.1/i586/libopenssl0.9.8-0.9.8g-4.5mdv2008.1.i586.rpm
7994189a9bdff555fa34d763a9eec321 2008.1/i586/libopenssl0.9.8-devel-0.9.8g-4.5mdv2008.1.i586.rpm
bfd128daaf2831e0af5cfd5163067be9 2008.1/i586/libopenssl0.9.8-static-devel-0.9.8g-4.5mdv2008.1.i586.rpm
cb8236b62c2edba4033f1cafa39c4ce5 2008.1/i586/openssl-0.9.8g-4.5mdv2008.1.i586.rpm
e0a15b72d2ef1d458f259368042f6321 2008.1/SRPMS/openssl-0.9.8g-4.5mdv2008.1.src.rpm
Mandriva Linux 2008.1/X86_64:
f12af113949996063624f4c638d5c75c 2008.1/x86_64/lib64openssl0.9.8-0.9.8g-4.5mdv2008.1.x86_64.rpm
0a6db81684a049b45d4536d583864415 2008.1/x86_64/lib64openssl0.9.8-devel-0.9.8g-4.5mdv2008.1.x86_64.rpm
f4f9dd377c41a83af03efe923a0e106e 2008.1/x86_64/lib64openssl0.9.8-static-devel-0.9.8g-4.5mdv2008.1.x86_64.rpm
e317fbadd87171b291584a9275f6b656 2008.1/x86_64/openssl-0.9.8g-4.5mdv2008.1.x86_64.rpm
e0a15b72d2ef1d458f259368042f6321 2008.1/SRPMS/openssl-0.9.8g-4.5mdv2008.1.src.rpm
Mandriva Linux 2009.0:
62125f9fde11ecec42ae21075a34f4c7 2009.0/i586/libopenssl0.9.8-0.9.8h-3.4mdv2009.0.i586.rpm
4e21025e35ffefe8ab4b8a2d5368a450 2009.0/i586/libopenssl0.9.8-devel-0.9.8h-3.4mdv2009.0.i586.rpm
5887cbeeb89f1e9824868d977ae7c83e 2009.0/i586/libopenssl0.9.8-static-devel-0.9.8h-3.4mdv2009.0.i586.rpm
45cf6fd02fadbca35ccfc1dea1e1054e 2009.0/i586/openssl-0.9.8h-3.4mdv2009.0.i586.rpm
2942f8a0a8070f3a59d9bfc6c8fa50c5 2009.0/SRPMS/openssl-0.9.8h-3.4mdv2009.0.src.rpm
Mandriva Linux 2009.0/X86_64:
287b7f8b3d478451e16b3e391e348c5e 2009.0/x86_64/lib64openssl0.9.8-0.9.8h-3.4mdv2009.0.x86_64.rpm
a7079cfda34bf4f4db722753244ee41b 2009.0/x86_64/lib64openssl0.9.8-devel-0.9.8h-3.4mdv2009.0.x86_64.rpm
047265cc0d6ac4627f9d82c3b809f362 2009.0/x86_64/lib64openssl0.9.8-static-devel-0.9.8h-3.4mdv2009.0.x86_64.rpm
9395a6acd0c2546f76da5a318d2f494f 2009.0/x86_64/openssl-0.9.8h-3.4mdv2009.0.x86_64.rpm
2942f8a0a8070f3a59d9bfc6c8fa50c5 2009.0/SRPMS/openssl-0.9.8h-3.4mdv2009.0.src.rpm
Mandriva Enterprise Server 5:
f7162720ce8713b9087cf91f7c2107c1 mes5/i586/libopenssl0.9.8-0.9.8h-3.4mdvmes5.i586.rpm
fb5183cd2e7adf3013f8224363cc5391 mes5/i586/libopenssl0.9.8-devel-0.9.8h-3.4mdvmes5.i586.rpm
e3b7029bd10babd86023f2b3299ec957 mes5/i586/libopenssl0.9.8-static-devel-0.9.8h-3.4mdvmes5.i586.rpm
4dc42b91974a65a75412896c0517a1ac mes5/i586/openssl-0.9.8h-3.4mdvmes5.i586.rpm
ba1f57df4b57fe6ba79dd083a99c1b8d mes5/SRPMS/openssl-0.9.8h-3.4mdvmes5.src.rpm
Mandriva Enterprise Server 5/X86_64:
d17052790ec6dbc7c98acbc552ed1d5a mes5/x86_64/lib64openssl0.9.8-0.9.8h-3.4mdvmes5.x86_64.rpm
cdba1f5866e5cb02efd5abb0671075c2 mes5/x86_64/lib64openssl0.9.8-devel-0.9.8h-3.4mdvmes5.x86_64.rpm
125739bc83e5a75c554e185d40932383 mes5/x86_64/lib64openssl0.9.8-static-devel-0.9.8h-3.4mdvmes5.x86_64.rpm
6a8ce7e9226cba94a43a561e9dff854f mes5/x86_64/openssl-0.9.8h-3.4mdvmes5.x86_64.rpm
ba1f57df4b57fe6ba79dd083a99c1b8d mes5/SRPMS/openssl-0.9.8h-3.4mdvmes5.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFKt6i6mqjQ0CJFipgRAgq1AKD25ShZyGisLKS/MbbqbL7zIwk79ACg4jzL
dFAH8Kc2YA+Fz68EAp+C/0U=
=Sbg/
-----END PGP SIGNATURE-----
