Slackware Advisory SSA:2003-141-05 mod_ssl RSA blinding fixes

  1. Network Vulnerabilities
  2. Slackware Local Security Checks
  3. Slackware Advisory SSA:2003-141-05 mod_ssl RSA blinding fixes
Summary
The remote host is missing an update as announced via advisory SSA:2003-141-05.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=SSA:2003-141-05
Insight
An upgrade for mod_ssl to version 2.8.14_1.3.27 is now available. This version provides RSA blinding by default which prevents an extended timing analysis from revealing details of the secret key to an attacker. Note that this problem was already fixed within OpenSSL, so this is a 'double fix'. With this package, mod_ssl is secured even if OpenSSL is not. We recommend sites using mod_ssl upgrade to this new package.
Severity
Medium Severity
Classification
Related Vulnerabilities