openssl security update for Stronghold

A new Stronghold 3 release is available which contains an updated fix for
the OpenSSL ASN1 vulnerability.

OpenSSL is a commercial-grade, full-featured, open source toolkit which
implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer
Security (TLS v1) protocols, as well as a full-strength general purpose
cryptography library.

The OpenSSL group found an issue in the patch that was released to fix the
previous vulnerability in the ASN.1 routines (RHSA-2002-164,
CAN-2002-0659). The previous patch did not completely eliminate the
initial vulnerability and could lead to Denial of Service (DoS) attacks
against a server. It has not been verified if this issue could lead to
further consequences, such as remote code execution.

We have backported the fix for the version of OpenSSL included in
Stronghold 3. Stronghold 3 build code 3019 is now available which
includes this fix, and can be downloaded from
http://stronghold.redhat.com/sh3/

For information on how to upgrade between releases of Stronghold 3, see
http://stronghold.redhat.com/support/upgrade-sh3.xml

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0659

OpenSSL