Skip to content
OpenAdvisories
Unscored DSA-2908-1 2 CVEs

openssl - security update

Published Apr 17, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 openssl 1.0.1e-2+deb7u7

Vulnerabilities 2

  • Unscored —
    CVE-2010-5298 EPSS 34%

    Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is …

  • Unscored —

    The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a cons…