diff --git a/docs/source/security/2015/20150312_openssl.rst b/docs/source/security/2015/20150312_openssl.rst index aa9a9e096..a40bc494c 100644 --- a/docs/source/security/2015/20150312_openssl.rst +++ b/docs/source/security/2015/20150312_openssl.rst @@ -1,19 +1,19 @@ 2015-03-12 - OpenSSL Vulnerabilities (FREAK) ============================================= -OpenSSL announced security fixes on 01/08/15 in the following bulletin: https://www-origin.openssl.org/news/secadv/20150108.txt +OpenSSL announced security fixes on 01/08/15 in the following bulletin: https://www-origin.openssl.org/news/secadv/20150108.txt Advisory CVEs ------------- * CVE-2015-0204 **RSA silently downgrades to EXPORT_RSA [Client]** (Severity: Low) -FREAK vulnerability CVE-2015-0204 is involved when 'RSA_EXPORT' ssl cipher suit is used in ssl server/client. +FREAK vulnerability CVE-2015-0204 is involved when 'RSA_EXPORT' ssl cipher suit is used in ssl server/client. Action ------ -xCAT does not use RSA_EXPORT ciphers for ssl communication by default. However, xCAT does allow user to choose the ciphers from the site.xcatsslciphers attribute. +xCAT does not use RSA_EXPORT ciphers for ssl communication by default. However, xCAT does allow user to choose the ciphers from the site.xcatsslciphers attribute. Make sure you do not put RSA_EXPORT related ciphers in this attribute.