Red Hat Security AdvisoryRHSA-2010:0163
openssl security update
Released 2010-03-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 openssl-0.9.7a-33.26, openssl-0.9.7a-33.26.i386, openssl-devel-0.9.7a-33.26 +3
- Red Hat Enterprise Linux AS version 3 openssl-0.9.7a-33.26, openssl-0.9.7a-33.26.i386, openssl-0.9.7a-33.26.ia64 +9
- Red Hat Enterprise Linux AS version 4 openssl-0.9.7a-43.17.el4_8.5, openssl-0.9.7a-43.17.el4_8.5.i386, openssl-0.9.7a-43.17.el4_8.5.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 openssl-0.9.7a-43.17.el4_8.5, openssl-0.9.7a-43.17.el4_8.5.i386, openssl-devel-0.9.7a-43.17.el4_8.5 +3
- Red Hat Enterprise Linux ES version 3 openssl-0.9.7a-33.26, openssl-0.9.7a-33.26.i386, openssl-0.9.7a-33.26.ia64 +6
- Red Hat Enterprise Linux ES version 4 openssl-0.9.7a-43.17.el4_8.5, openssl-0.9.7a-43.17.el4_8.5.i386, openssl-0.9.7a-43.17.el4_8.5.ia64 +6
- Red Hat Enterprise Linux WS version 3 openssl-0.9.7a-33.26, openssl-0.9.7a-33.26.i386, openssl-0.9.7a-33.26.ia64 +6
- Red Hat Enterprise Linux WS version 4 openssl-0.9.7a-43.17.el4_8.5, openssl-0.9.7a-43.17.el4_8.5.i386, openssl-0.9.7a-43.17.el4_8.5.ia64 +6
Fixes 3 records
Priority CRITICAL 91
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87264 · Published 2009-11-09 · Fixed in 7.0.10, 6.0.32 +1 CWE-300
Priority LOW 32
The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) Un…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06709 · Published 2009-03-27 · Fixed CWE-119
Priority LOW 30
The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.0427 · Published 2009-07-30 · Fixed CWE-295
THREATIST.IORead the docs