version 1.435, 2003/03/06 21:44:07 |
version 1.436, 2003/03/19 01:47:10 |
|
|
<a name=all></a> |
<a name=all></a> |
<li><h3><font color="#e00000">All architectures</font></h3> |
<li><h3><font color="#e00000">All architectures</font></h3> |
<ul> |
<ul> |
|
<a name=blinding></a> |
|
<li><font color="#009000"><strong>011: SECURITY FIX: March 18, 2003</strong></font><br> |
|
Various SSL and TLS operations in OpenSSL are vulnerable to timing attacks. |
|
<br> |
|
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/011_blinding.patch">An |
|
``RSA blinding'' source code patch exists which remedies the problem</a>. |
|
<p> |
<a name=lprm></a> |
<a name=lprm></a> |
<li><font color="#009000"><strong>010: SECURITY FIX: March 5, 2003</strong></font><br> |
<li><font color="#009000"><strong>010: SECURITY FIX: March 5, 2003</strong></font><br> |
A fix for an |
A fix for an |