Vulnerability Bulletins |
DSA-4539 openssl - security update |
|
| Affected software | Debian |
|
Three security issues were discovered in OpenSSL: A timing attack againstECDSA, a padding oracle in PKCS7_dataDecode() and CMS_decrypt_set1_pkey()and it was discovered that a feature of the random number generator (RNG)intended to protect against shared RNG state between parent and childprocesses in the event of a fork() syscall was not used by default. More info: https://www.debian.org/security/2019/dsa-4539 |
|