Red Hat Security AdvisoryRHSA-2010:0979
openssl security update
Released 2010-12-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.0-4.el6_0.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-1.0.0-4.el6_0.2, openssl-devel-1.0.0-4.el6_0.2, openssl-perl-1.0.0-4.el6_0.2 +1
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.0-4.el6_0.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-1.0.0-4.el6_0.2, openssl-devel-1.0.0-4.el6_0.2, openssl-perl-1.0.0-4.el6_0.2 +1
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.0-4.el6_0.2, openssl-1.0.0-4.el6_0.2.ppc, openssl-devel-1.0.0-4.el6_0.2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-1.0.0-4.el6_0.2, openssl-perl-1.0.0-4.el6_0.2, openssl-static-1.0.0-4.el6_0.2
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.0-4.el6_0.2, openssl-devel-1.0.0-4.el6_0.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-1.0.0-4.el6_0.2, openssl-perl-1.0.0-4.el6_0.2, openssl-static-1.0.0-4.el6_0.2
Fixes 1 record
Priority LOW 32
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to fo…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.09497 · Published 2010-12-06 · Partial fix
