Уведомление безопасности DSA-134

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Debian

libssl0.9.6 (any) libssl-dev (any) openssl (any) ssh (any) ssh-askpass-gnome (any) ssleay (any)

Уведомление безопасности об уязвимостях libssl-dev, openssl, ssh-askpass-gnome, ssh, ssleay, libssl0.9.6

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 3.0:
ppc:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
s390x:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
m68k:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
i686:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
arm:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
sparc:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
alpha:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
ia64:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
mips:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
mipsel:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
hppa:
ssh - 3.4p1-0.0woody1
ssh-askpass-gnome - 3.4p1-0.0woody1
Debian GNU/Linux 2.2:
ppc:
ssh-askpass-gnome - 3.4p1-0.0potato1
ssh - 3.4p1-0.0potato1
openssl - 0.9.6c-0.potato.1
libssl-dev - 0.9.6c-0.potato.1
libssl0.9.6 - 0.9.6c-0.potato.1
noarch:
ssleay - 0.9.6c-0.potato.1
sparc:
ssh-askpass-gnome - 3.4p1-0.0potato1
ssh - 3.4p1-0.0potato1
libssl-dev - 0.9.6c-0.potato.1
libssl0.9.6 - 0.9.6c-0.potato.1
openssl - 0.9.6c-0.potato.1
alpha:
ssh - 3.4p1-0.0potato1
ssh-askpass-gnome - 3.4p1-0.0potato1
libssl0.9.6 - 0.9.6c-0.potato.1
openssl - 0.9.6c-0.potato.1
libssl-dev - 0.9.6c-0.potato.1
i686:
ssh-askpass-gnome - 3.4p1-0.0potato1
ssh - 3.4p1-0.0potato1
libssl-dev - 0.9.6c-0.potato.1
libssl0.9.6 - 0.9.6c-0.potato.1
openssl - 0.9.6c-0.potato.1
arm:
ssh - 3.4p1-0.0potato1
ssh-askpass-gnome - 3.4p1-0.0potato1
libssl0.9.6 - 0.9.6c-0.potato.1
libssl-dev - 0.9.6c-0.potato.1
openssl - 0.9.6c-0.potato.1

http://www.debian.org/security/dsa-134/

Источник: CVE
Наименование: CVE-2002-0639
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0639

Источник: CVE
Наименование: CVE-2002-0640
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0640