Red Hat Security AdvisoryRHSA-2014:1652
openssl security update
Released 2014-10-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.1e-34.el7_0.6, openssl-libs-1:1.0.1e-34.el7_0.6
- Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.1e-34.el7_0.6, openssl-perl-1:1.0.1e-34.el7_0.6, openssl-static-1:1.0.1e-34.el7_0.6
- Red Hat Enterprise Linux ComputeNode (v. 7) openssl-1:1.0.1e-34.el7_0.6, openssl-libs-1:1.0.1e-34.el7_0.6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.1e-34.el7_0.6, openssl-perl-1:1.0.1e-34.el7_0.6, openssl-static-1:1.0.1e-34.el7_0.6
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.1e-30.el6_6.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-devel-1.0.1e-30.el6_6.2, openssl-perl-1.0.1e-30.el6_6.2, openssl-static-1.0.1e-30.el6_6.2
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.1e-30.el6_6.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-devel-1.0.1e-30.el6_6.2, openssl-perl-1.0.1e-30.el6_6.2, openssl-static-1.0.1e-30.el6_6.2
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.1e-30.el6_6.2, openssl-1.0.1e-30.el6_6.2.ppc, openssl-devel-1.0.1e-30.el6_6.2 +1
- Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.1e-34.el7_0.6, openssl-devel-1:1.0.1e-34.el7_0.6, openssl-devel-1:1.0.1e-34.el7_0.6.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl-1.0.1e-30.el6_6.2, openssl-static-1.0.1e-30.el6_6.2
- Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.1e-34.el7_0.6, openssl-static-1:1.0.1e-34.el7_0.6, openssl-static-1:1.0.1e-34.el7_0.6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.1e-30.el6_6.2, openssl-devel-1.0.1e-30.el6_6.2
- Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.1e-34.el7_0.6, openssl-devel-1:1.0.1e-34.el7_0.6, openssl-libs-1:1.0.1e-34.el7_0.6
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl-1.0.1e-30.el6_6.2, openssl-static-1.0.1e-30.el6_6.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.1e-34.el7_0.6, openssl-static-1:1.0.1e-34.el7_0.6
Fixes 2 records
Priority MEDIUM 58
Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.37072 · Published 2014-10-19 · Partial fix CWE-20
Priority MEDIUM 51
Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted s…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.22747 · Published 2014-10-19 · Fixed CWE-20
