Red Hat Security AdvisoryRHSA-2015:0197
rhevm-spice-client security and bug fix update
Released 2015-02-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEV-M 3.5 rhevm-spice-client-3.5-2.el6, rhevm-spice-client-x64-cab-3.5-2.el6, rhevm-spice-client-x64-msi-3.5-2.el6 +2
Fixes 2 records
Priority MEDIUM 44
Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a de…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.12911 · Published 2014-08-13 · Fixed CWE-362
Priority LOW 35
The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a c…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.14129 · Published 2014-08-13 · Fixed
