Red Hat Security AdvisoryRHSA-2017:0286
openssl security update
Released 2017-02-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.1e-60.el7_3.1, openssl-libs-1:1.0.1e-60.el7_3.1
- Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.1e-60.el7_3.1, openssl-perl-1:1.0.1e-60.el7_3.1, openssl-static-1:1.0.1e-60.el7_3.1
- Red Hat Enterprise Linux ComputeNode (v. 7) openssl-1:1.0.1e-60.el7_3.1, openssl-libs-1:1.0.1e-60.el7_3.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.1e-60.el7_3.1, openssl-perl-1:1.0.1e-60.el7_3.1, openssl-static-1:1.0.1e-60.el7_3.1
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.1e-48.el6_8.4
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-devel-1.0.1e-48.el6_8.4, openssl-perl-1.0.1e-48.el6_8.4, openssl-static-1.0.1e-48.el6_8.4
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.1e-48.el6_8.4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-devel-1.0.1e-48.el6_8.4, openssl-perl-1.0.1e-48.el6_8.4, openssl-static-1.0.1e-48.el6_8.4
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.1e-48.el6_8.4, openssl-1.0.1e-48.el6_8.4.ppc, openssl-devel-1.0.1e-48.el6_8.4 +1
- Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.1e-60.el7_3.1, openssl-devel-1:1.0.1e-60.el7_3.1, openssl-devel-1:1.0.1e-60.el7_3.1.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl-1.0.1e-48.el6_8.4, openssl-static-1.0.1e-48.el6_8.4
- Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.1e-60.el7_3.1, openssl-static-1:1.0.1e-60.el7_3.1, openssl-static-1:1.0.1e-60.el7_3.1.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.1e-48.el6_8.4, openssl-devel-1.0.1e-48.el6_8.4
- Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.1e-60.el7_3.1, openssl-devel-1:1.0.1e-60.el7_3.1, openssl-libs-1:1.0.1e-60.el7_3.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl-1.0.1e-48.el6_8.4, openssl-static-1.0.1e-48.el6_8.4
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.1e-60.el7_3.1, openssl-static-1:1.0.1e-60.el7_3.1
Fixes 2 records
Priority HIGH 66
If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.57322 · Published 2017-05-04 · Partial fix CWE-125
Priority MEDIUM 60
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.39919 · Published 2017-11-13 · Partial fix CWE-400
