Red Hat Security AdvisoryRHSA-2010:0173
openssl096b security update
Released 2010-03-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 openssl096b-0.9.6b-16.50, openssl096b-0.9.6b-16.50.i386
- Red Hat Enterprise Linux AS version 3 openssl096b-0.9.6b-16.50, openssl096b-0.9.6b-16.50.i386, openssl096b-0.9.6b-16.50.ia64 +1
- Red Hat Enterprise Linux AS version 4 openssl096b-0.9.6b-22.46.el4_8.1, openssl096b-0.9.6b-22.46.el4_8.1.i386, openssl096b-0.9.6b-22.46.el4_8.1.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 openssl096b-0.9.6b-22.46.el4_8.1, openssl096b-0.9.6b-22.46.el4_8.1.i386
- Red Hat Enterprise Linux ES version 3 openssl096b-0.9.6b-16.50, openssl096b-0.9.6b-16.50.i386, openssl096b-0.9.6b-16.50.ia64
- Red Hat Enterprise Linux ES version 4 openssl096b-0.9.6b-22.46.el4_8.1, openssl096b-0.9.6b-22.46.el4_8.1.i386, openssl096b-0.9.6b-22.46.el4_8.1.ia64
- Red Hat Enterprise Linux WS version 3 openssl096b-0.9.6b-16.50, openssl096b-0.9.6b-16.50.i386, openssl096b-0.9.6b-16.50.ia64
- Red Hat Enterprise Linux WS version 4 openssl096b-0.9.6b-22.46.el4_8.1, openssl096b-0.9.6b-22.46.el4_8.1.i386, openssl096b-0.9.6b-22.46.el4_8.1.ia64
Fixes 1 record
Priority MEDIUM 52
OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified i…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05779 · Published 2010-03-05 · Fixed CWE-20
