Updated advisory on Heartbleed. On 10th April (revised on 12th April), we released a Step-By-Step Guide to Fix OpenSSL Heartbleed Information Disclosure Vulnerability. This is a detailed advisory in addition to the Alert that we released on 8th April, regarding a high level vulnerability that exist on OpenSSL Versions 1.0.1 through 1.0.1f that could disclose sensitive information belonging to users to an attacker. The advisory includes recommendations on how to patch vulnerabilities for the following affected servers: (i) Debian Wheezy (stable), OpenSSL 1.0.1e-2+deb7u4 (ii) Ubuntu 12.04.4 LTS, OpenSSL 1.0.1-4ubuntu5.11 (iii) CentOS 6.5, OpenSSL 1.0.1e-15 (iv) OpenBSD 5.3 (OpenSSL 1.0.1c 10 May 2012) and 5.4 (OpenSSL 1.0.1c 10 May 2012) (v) FreeBSD 10.0 - OpenSSL 1.0.1e 11 Feb 2013 (vi) NetBSD 5.0.2 (OpenSSL 1.0.1e) (vii) OpenSUSE 12.2 (OpenSSL 1.0.1c) Click here to access the advisory mycert.org.my/en/services/advisories/mycert/2014/main/detail/964/index.html
Posted on: Mon, 14 Apr 2014 04:34:56 +0000
Recently Viewed Topics
© 2015