Skip to content
OpenAdvisories
High RHSA-2004:120 3 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as openssl 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::as openssl-debuginfo 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::as openssl-devel 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::as openssl-perl 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::as openssl096b 0:0.9.6b-16
Red Hat · RHEL 3 enterprise_linux:3::as openssl096b-debuginfo 0:0.9.6b-16
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl-debuginfo 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl-devel 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl-perl 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl096b 0:0.9.6b-16
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl096b-debuginfo 0:0.9.6b-16
Red Hat · RHEL 3 enterprise_linux:3::es openssl 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::es openssl-debuginfo 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::es openssl-devel 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::es openssl-perl 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::es openssl096b 0:0.9.6b-16
Red Hat · RHEL 3 enterprise_linux:3::es openssl096b-debuginfo 0:0.9.6b-16
Red Hat · RHEL 3 enterprise_linux:3::ws openssl 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::ws openssl-debuginfo 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::ws openssl-devel 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::ws openssl-perl 0:0.9.7a-33.4
Red Hat · RHEL 3 enterprise_linux:3::ws openssl096b 0:0.9.6b-16
Red Hat · RHEL 3 enterprise_linux:3::ws openssl096b-debuginfo 0:0.9.6b-16

Vulnerabilities 3

  • High 7.5
    CVE-2004-0079

    The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause …

    openssl Debian
  • Unscored —
    CVE-2004-0081

    OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a de…

    openssl Debian
  • Unscored —
    CVE-2004-0112 EPSS 10%

    The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly…

    openssl Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    http://www.codenomicon.com/testtools/tls/
  • article
    http://www.niscc.gov.uk/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=117770
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_120.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617140
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0079
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0079
  • report
    https://access.redhat.com/security/cve/CVE-2004-0081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617142
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0081
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0081
  • report
    https://access.redhat.com/security/cve/CVE-2004-0112
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617156
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0112
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0112