Skip to content
OpenAdvisories
Critical RHSA-2010:0163 3 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as openssl 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::as openssl-debuginfo 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::as openssl-devel 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::as openssl-perl 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl-debuginfo 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl-devel 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::desktop openssl-perl 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::es openssl 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::es openssl-debuginfo 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::es openssl-devel 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::es openssl-perl 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::ws openssl 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::ws openssl-debuginfo 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::ws openssl-devel 0:0.9.7a-33.26
Red Hat · RHEL 3 enterprise_linux:3::ws openssl-perl 0:0.9.7a-33.26
Red Hat · RHEL 4 enterprise_linux:4::as openssl 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::as openssl-debuginfo 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::as openssl-devel 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::as openssl-perl 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::desktop openssl 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::desktop openssl-debuginfo 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::desktop openssl-devel 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::desktop openssl-perl 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::es openssl 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::es openssl-debuginfo 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::es openssl-devel 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::es openssl-perl 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::ws openssl 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::ws openssl-debuginfo 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::ws openssl-devel 0:0.9.7a-43.17.el4_8.5
Red Hat · RHEL 4 enterprise_linux:4::ws openssl-perl 0:0.9.7a-43.17.el4_8.5

Vulnerabilities 3

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Unscored —
    CVE-2009-0590

    The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invali…

    openssl Debian
  • Unscored —
    CVE-2009-2409

    The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0…

    openssl nss Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492304
  • article
    http://kbase.redhat.com/faq/docs/DOC-20491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=510197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533125
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0163.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0590
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0590
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0590
  • report
    https://access.redhat.com/security/cve/CVE-2009-2409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2409
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2409
  • report
    https://access.redhat.com/security/cve/CVE-2009-3555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3555