version 1.438, 2003/03/20 17:04:31 |
version 1.439, 2003/03/24 19:21:06 |
|
|
<a name=all></a> |
<a name=all></a> |
<li><h3><font color="#e00000">All architectures</font></h3> |
<li><h3><font color="#e00000">All architectures</font></h3> |
<ul> |
<ul> |
|
<a name=kerberos></a> |
|
<li><font color="#009000"><strong>013: SECURITY FIX: March 24, 2003</strong></font><br> |
|
A cryptographic weaknesses in the Kerberos v4 protocol can be exploited |
|
on Kerberos v5 as well. |
|
<br> |
|
<a href="ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/013_kerberos.patch">A |
|
source code patch exists which remedies the problem</a>. |
|
<p> |
<a name=kpr></a> |
<a name=kpr></a> |
<li><font color="#009000"><strong>012: SECURITY FIX: March 19, 2003</strong></font><br> |
<li><font color="#009000"><strong>012: SECURITY FIX: March 19, 2003</strong></font><br> |
OpenSSL is vulnerable to an extension of the ``Bleichenbacher'' attack designed |
OpenSSL is vulnerable to an extension of the ``Bleichenbacher'' attack designed |