Red Hat Security AdvisoryRHSA-2010:0888
openssl security update
Released 2010-11-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.0-4.el6_0.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-1.0.0-4.el6_0.1, openssl-devel-1.0.0-4.el6_0.1, openssl-perl-1.0.0-4.el6_0.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.0-4.el6_0.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-1.0.0-4.el6_0.1, openssl-devel-1.0.0-4.el6_0.1, openssl-perl-1.0.0-4.el6_0.1 +1
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.0-4.el6_0.1, openssl-1.0.0-4.el6_0.1.ppc, openssl-devel-1.0.0-4.el6_0.1 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-1.0.0-4.el6_0.1, openssl-perl-1.0.0-4.el6_0.1, openssl-static-1.0.0-4.el6_0.1
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.0-4.el6_0.1, openssl-devel-1.0.0-4.el6_0.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-1.0.0-4.el6_0.1, openssl-perl-1.0.0-4.el6_0.1, openssl-static-1.0.0-4.el6_0.1
Fixes 1 record
Priority MEDIUM 53
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.22145 · Published 2010-11-17 · Fixed CWE-362
