Red Hat Security Advisory

RHSA-2019:0085

pyOpenSSL security and bug fix update

Released 2019-01-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 pyOpenSSL-17.5.0-1.el7ost, python2-pyOpenSSL-17.5.0-1.el7ost

Fixes 2 records

TI-2018-16031 CVE-2018-1000807 · GHSA-p28m-34f6-967q

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a…

MEDIUM 42

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service o…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04075 Published 2018-10-08 Partial fix · 17.5.0 CWE-416

TI-2018-16032 CVE-2018-1000808 · GHSA-2rcm-phc9-3945

Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401…

LOW 30

Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memor…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01895 Published 2018-10-08 Partial fix · 17.5.0 CWE-404