Red Hat Security AdvisoryRHSA-2009:0004
openssl security update
Released 2009-01-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 openssl-0.9.7a-33.25, openssl-0.9.7a-33.25.i386, openssl-devel-0.9.7a-33.25 +5
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8b-10.el5_2.1, openssl-0.9.8b-10.el5_2.1.i386, openssl-0.9.8b-10.el5_2.1.ia64 +13
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 openssl-0.9.6b-49, openssl-0.9.6b-49.i386, openssl-0.9.6b-49.ia64 +10
- Red Hat Enterprise Linux AS version 3 openssl-0.9.7a-33.25, openssl-0.9.7a-33.25.i386, openssl-0.9.7a-33.25.ia64 +13
- Red Hat Enterprise Linux AS version 4 openssl-0.9.7a-43.17.el4_7.2, openssl-0.9.7a-43.17.el4_7.2.i386, openssl-0.9.7a-43.17.el4_7.2.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8b-10.el5_2.1, openssl-0.9.8b-10.el5_2.1.i386, openssl-perl-0.9.8b-10.el5_2.1 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl-0.9.8b-10.el5_2.1, openssl-devel-0.9.8b-10.el5_2.1, openssl-devel-0.9.8b-10.el5_2.1.i386
- Red Hat Enterprise Linux Desktop version 4 openssl-0.9.7a-43.17.el4_7.2, openssl-0.9.7a-43.17.el4_7.2.i386, openssl-devel-0.9.7a-43.17.el4_7.2 +5
- Red Hat Enterprise Linux ES version 2.1 openssl-0.9.6b-49, openssl-0.9.6b-49.i386, openssl-devel-0.9.6b-49.i386 +1
- Red Hat Enterprise Linux ES version 3 openssl-0.9.7a-33.25, openssl-0.9.7a-33.25.i386, openssl-0.9.7a-33.25.ia64 +9
- Red Hat Enterprise Linux ES version 4 openssl-0.9.7a-43.17.el4_7.2, openssl-0.9.7a-43.17.el4_7.2.i386, openssl-0.9.7a-43.17.el4_7.2.ia64 +9
- Red Hat Enterprise Linux WS version 2.1 openssl-0.9.6b-49, openssl-0.9.6b-49.i386, openssl-devel-0.9.6b-49.i386 +1
- Red Hat Enterprise Linux WS version 3 openssl-0.9.7a-33.25, openssl-0.9.7a-33.25.i386, openssl-0.9.7a-33.25.ia64 +9
- Red Hat Enterprise Linux WS version 4 openssl-0.9.7a-43.17.el4_7.2, openssl-0.9.7a-43.17.el4_7.2.i386, openssl-0.9.7a-43.17.el4_7.2.ia64 +9
- Red Hat Linux Advanced Workstation 2.1 openssl-0.9.6b-49, openssl-0.9.6b-49.ia64, openssl-devel-0.9.6b-49.ia64 +5
Fixes 1 record
Priority LOW 34
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.05146 · Published 2009-01-07 · Fixed CWE-20
