Red Hat Security AdvisoryRHSA-2019:2471
openssl security update
Released 2019-08-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.1e-58.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-devel-1.0.1e-58.el6_10, openssl-perl-1.0.1e-58.el6_10, openssl-static-1.0.1e-58.el6_10
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.1e-58.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-devel-1.0.1e-58.el6_10, openssl-perl-1.0.1e-58.el6_10, openssl-static-1.0.1e-58.el6_10
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.1e-58.el6_10, openssl-1.0.1e-58.el6_10.ppc, openssl-devel-1.0.1e-58.el6_10 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl-1.0.1e-58.el6_10, openssl-static-1.0.1e-58.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.1e-58.el6_10, openssl-devel-1.0.1e-58.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl-1.0.1e-58.el6_10, openssl-static-1.0.1e-58.el6_10
Fixes 1 record
Priority MEDIUM 43
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte r…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.17139 · Published 2019-02-27 · Partial fix CWE-203
