The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux, stores the SSL key in a binpkg, which allows local users to extract the key from the binpkg, and causes multiple systems that use this binpkg to have the same SSL key and certificate.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-nntp/inn.Upgrade net-misc/stunnel.Upgrade net-ftp/netkit-ftpd.Upgrade net-mail/cyrus-imapd.Upgrade net-mail/dovecot.Upgrade mail-mta/postfix.Upgrade app-admin/conserver.Upgrade net-irc/unrealircd.Upgrade net-im/ejabberd. | Oct 30, 2017 | Mar 18, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub