AWS環境ã®DROWN対応 (CVE-2016-0800)ã«ã¤ã„㦠| DevelopersIOã¯ã˜ã‚ã« AWSãƒãƒ¼ãƒ ã®ã™ãšãã§ã™ã€‚ 2006å¹´3月1æ—¥ã€SSL/TLSãŒä¸æ£ã«ç›—è´ã•ã‚Œã‚‹æã‚Œã®ã‚る脆弱性ã¨ã—㦠DROWN (Decrypting RSA with Obsolete and Weakened eNcryption)ã®å ±å‘ŠãŒã‚ã‚Šã¾ã—ãŸã€‚ An OpenSSL User’s Guide to DROWN AWSã‹ã‚‰ã‚‚ã€ELB（ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µï¼‰åˆ©ç”¨è€…å‘ã‘ã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ãŒã‚ã‚Šã¾ã—ãŸã®ã§ã€ãã®å†…容ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ CVE-2016-0800 Advisory DROWNã«ã¤ã„㦠サーãƒãŒSSLv2ã«ã‚ˆã‚‹æŽ¥ç¶šãŒå¯èƒ½ãªå ´åˆã€ç¬¬ä¸‰è€…ã«ã‚ˆã‚‹æ”»æ’ƒã«ã‚ˆã‚Šæš—å·åŒ–ã•ã‚ŒãŸé€šä¿¡ãŒä¸æ£ã«å¾©å·ã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚Šã¾ã™ã€‚ AWSã§ã®å¯¾å¿œã«ã¤ã„㦠ELB AWSコンソールã®EC2ç”»é¢ã‚ˆã‚Šã€ã€Œãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã€ã®ç”»é¢ã‚’é–‹ãã¾ã™ã€‚ 対象ã¨ãªã‚‹ELBを指定ã—ã€ã€Œãƒªã‚¹ãƒŠãƒ¼ã€ã®ã‚¿ãƒ–ã‹ã‚‰ã€Œå¤‰æ›´ã€ã‚’指定ã—è¨å®šç”»é¢ã‚’é–‹ãã¾ã™
{{#tags}}- {{label}}
{{/tags}}