Return to errata45.html CVS log | Up to [local] / www |
version 1.5, 2009/04/13 01:24:38 | version 1.6, 2009/04/25 16:20:25 | ||
---|---|---|---|
|
|
||
<li><a name="001_openssl"></a> | <li><a name="001_openssl"></a> | ||
<font color="#009000"><strong>001: RELIABILITY FIX: April 8, 2009</strong></font> <i>All architectures</i><br> | <font color="#009000"><strong>001: RELIABILITY FIX: April 8, 2009</strong></font> <i>All architectures</i><br> | ||
The OpenSSL ASN.1 handling code could be forced to perform invalid memory | The OpenSSL ASN.1 handling code could be forced to perform invalid memory | ||
accesses though the use of certain invalid strings | accesses through the use of certain invalid strings | ||
(<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590">CVE-2009-0590</a>) | (<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590">CVE-2009-0590</a>) | ||
or under certain error conditions triggerable by invalid ASN.1 structures | or under certain error conditions triggerable by invalid ASN.1 structures | ||
(<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789">CVE-2009-0789</a>). | (<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789">CVE-2009-0789</a>). |