Red Hat Security AdvisoryRHSA-2010:0054
openssl security update
Released 2010-01-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-12.el5_4.1, openssl-0.9.8e-12.el5_4.1.i386, openssl-0.9.8e-12.el5_4.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8e-12.el5_4.1, openssl-0.9.8e-12.el5_4.1.i386, openssl-perl-0.9.8e-12.el5_4.1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl-0.9.8e-12.el5_4.1, openssl-devel-0.9.8e-12.el5_4.1, openssl-devel-0.9.8e-12.el5_4.1.i386
Fixes 2 records
Priority LOW 35
Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors t…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.09184 · Published 2010-01-14 · Fixed CWE-399
Priority LOW 30
The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.0427 · Published 2009-07-30 · Fixed CWE-295
