Red Hat Security AdvisoryRHSA-2015:2616
openssl security update
Released 2015-12-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-37.el5_11, openssl-0.9.8e-37.el5_11.i386, openssl-0.9.8e-37.el5_11.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8e-37.el5_11, openssl-0.9.8e-37.el5_11.i386, openssl-perl-0.9.8e-37.el5_11 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl-0.9.8e-37.el5_11, openssl-devel-0.9.8e-37.el5_11, openssl-devel-0.9.8e-37.el5_11.i386
Fixes 1 record
Priority MEDIUM 51
The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.38709 · Published 2015-12-06 · Partial fix CWE-200
