Red Hat Security AdvisoryRHSA-2010:0978
openssl security update
Released 2010-12-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-12.el5_5.7, openssl-0.9.8e-12.el5_5.7.i386, openssl-0.9.8e-12.el5_5.7.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8e-12.el5_5.7, openssl-0.9.8e-12.el5_5.7.i386, openssl-perl-0.9.8e-12.el5_5.7 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl-0.9.8e-12.el5_5.7, openssl-devel-0.9.8e-12.el5_5.7, openssl-devel-0.9.8e-12.el5_5.7.i386
Fixes 2 records
Priority LOW 32
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to fo…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.09497 · Published 2010-12-06 · Partial fix
Priority LOW 26
OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher v…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03426 · Published 2010-12-06 · Partial fix CWE-310
