Security Update 2002-08-02 for OpenSSL, Sun RPC, mod_ssl

Product Security product-security at apple.com
Tue Dec 10 11:45:29 PST 2019


<security-announce.lists.apple.com>
List-Post: <mailto:security-announce at lists.apple.com>
List-Help: <mailto:security-announce-request at lists.apple.com?subject=help>
List-Subscribe:
<http://www.lists.apple.com/mailman/listinfo/security-announce>,
	<mailto:security-announce-request at lists.apple.com?subject=subscribe>
List-Archive: <http://www.lists.apple.com/archives/security-announce/>
Date: Fri, 2 Aug 2002 15:45:34 -0700

*** PGP SIGNATURE VERIFICATION ***
*** Status:   Bad Signature
*** Alert:    Signature did not verify. Message has been altered.
*** Signer:   Apple Product Security <product-security at apple.com> (0x44E85F68)
*** Signed:   08/02/2002 11:44:10 PM
*** Verified: 08/03/2002 08:34:01 AM
*** BEGIN PGP VERIFIED MESSAGE ***
Security Update 2002-08-02 is now available.  It contains fixes for
recent
vulnerabilities in:

    OpenSSL:  Fixes security vulnerabilities CAN-2002-0656,
CAN-2002-0657,
       CAN-2002-0655, and CAN-2002-0659.  Details are available via:
       http://www.cert.org/advisories/CA-2002-23.html

    mod_ssl:  Fixes CAN-2002-0653, an off-by-one buffer overflow in the
       mod_ssl Apache module.  Details are available via:
       http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0653

    Sun RPC:  Fixes CAN-2002-039, a buffer overflow in the Sun RPC XDR
decoder.
       Details are available via:

http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823

Affected systems:  Mac OS X client and Mac OS X Server

Note:  Mac OS X client is configured by default to have these services
turned
off, and is only vulnerable if the user has enabled network services
which rely
on the affected components.  It is still recommended for Mac OS X
client users
to apply this security update to their system.

System requirements:  Mac OS X 10.1.5

Security Update 2002-08-02 may be obtained from:

   * Software Update pane in System Preferences

   * Apple's Software Downloads web site:
       http://docs.info.apple.com/article.html?artnum=120139

       SSL server:
       https://depot.info.apple.com/security/129403bc5e184e3b7367.html

To help verify the integrity of Security Update 2002-08-02 from the
Software Downloads web site:

    The download file is titled:  SecurityUpd2002-08-02.dmg
    Its SHA-1 digest is:  54f6eebe0398181db8f1129403bc5e184e3b7367

Information will also be posted to the Apple Product Security web site:
http://www.apple.com/support/security/security_updates.html

This message is signed with Apple's Product Security PGP key, and
details are available at:
http://www.apple.com/support/security/security_pgp.html
*** END PGP VERIFIED MESSAGE ***
_______________________________________________
security-announce mailing list | security-announce at lists.apple.com
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/security-announce
Do not post admin requests to the list. They will be ignored.

---
_______________________________________________
mac_crypto mailing list
mac_crypto at vmeng.com
http://www.vmeng.com/mailman/listinfo/mac_crypto

--- end forwarded text


-- 
-----------------
R. A. Hettinga <mailto: rah at ibuc.com>
The Internet Bearer Underwriting Corporation <http://www.ibuc.com/>
44 Farquhar Street, Boston, MA 02131 USA
"... however it may deserve respect for its usefulness and antiquity,
[predicting the end of the world] has not been found agreeable to
experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'





More information about the cypherpunks-legacy mailing list