°øÁö»çÇ×

Á¦¸ñ OpenSSL Ãë¾àÁ¡ º¸¾È¾÷µ¥ÀÌÆ® ±Ç°í
ÀÛ¼ºÀÏ 2015-10-28

°³¿ä

  • OpenSSL¿¡¼­´Â ÀÎÁõ¼­ °ËÁõÀ» ¿ìȸÇÒ ¼ö ÀÖ´Â Ãë¾àÁ¡À» º¸¿ÏÇÑ º¸¾È¾÷µ¥ÀÌÆ®¸¦ ¹ßÇ¥[1]

¼³¸í

  • ½Å·ÚÇÒ ¼ö ¾ø´Â ÀÎÁõ¼­¸¦ À¯È¿ÇÑ ÀÎÁõ¼­·Î »ç¿ëÇÒ ¼ö ÀÖ´Â Ãë¾àÁ¡(CVE-2015-1793)

ÇØ´ç ½Ã½ºÅÛ

  • ¿µÇâ ¹Þ´Â Á¦Ç° ¹× ¹öÀü
    - OpenSSL 1.0.2b
    - OpenSSL 1.0.2c
    - OpenSSL 1.0.1n
    - OpenSSL 1.0.1o

ÇØ°á ¹æ¾È

  • ÇØ´ç Ãë¾àÁ¡¿¡ ¿µÇâ ¹Þ´Â ¹öÀüÀÇ »ç¿ëÀÚ´Â ¾Æ·¡ ¹öÀüÀ¸·Î ¾÷µ¥ÀÌÆ®[2]
    - OpenSSL 1.0.2b/1.0.2c »ç¿ëÀÚ : 1.0.2d·Î ¾÷µ¥ÀÌÆ®
    - OpenSSL 1.0.1n/1.0.1o »ç¿ëÀÚ : 1.0.1p·Î ¾÷µ¥ÀÌÆ®

±âŸ ¹®ÀÇ»çÇ×

  • Çѱ¹ÀÎÅͳÝÁøÈï¿ø ÀÎÅͳÝħÇØ´ëÀÀ¼¾ÅÍ : ±¹¹ø¾øÀÌ 118

[Âü°í»çÀÌÆ®]

  1. https://www.openssl.org/news/secadv_20150709.txt

  2. https://www.openssl.org/

¡ã ÀÌÀü±Û OpenSSL Ãë¾àÁ¡ º¸¾È¾÷µ¥ÀÌÆ® ±Ç°í
¡å ´ÙÀ½±Û OpenSSL ´ÙÁß Ãë¾àÁ¡ º¸¾È¾÷µ¥ÀÌÆ® ±Ç°í