Skip to content
OpenAdvisories
Unscored RHSA-2010:0977 3 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as openssl 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::as openssl-debuginfo 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::as openssl-devel 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::as openssl-perl 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::desktop openssl 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::desktop openssl-debuginfo 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::desktop openssl-devel 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::desktop openssl-perl 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::es openssl 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::es openssl-debuginfo 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::es openssl-devel 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::es openssl-perl 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::ws openssl 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::ws openssl-debuginfo 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::ws openssl-devel 0:0.9.7a-43.17.el4_8.6
Red Hat · RHEL 4 enterprise_linux:4::ws openssl-perl 0:0.9.7a-43.17.el4_8.6

Vulnerabilities 3

  • Unscored —
    CVE-2008-7270

    OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ci…

    openssl Debian
  • Unscored —
    CVE-2009-3245

    OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, …

    openssl Debian
  • Unscored —
    CVE-2010-4180

    OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prope…

    openssl Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=570924
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=659462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=660650
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0977.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-7270
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-7270
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-7270
  • report
    https://access.redhat.com/security/cve/CVE-2009-3245
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3245
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3245
  • report
    https://access.redhat.com/security/cve/CVE-2010-4180
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-4180
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-4180