Skip to content
OpenAdvisories
Unscored RHSA-2014:0015 3 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client openssl 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::client openssl-debuginfo 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::client openssl-devel 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::client openssl-perl 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::client openssl-static 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-debuginfo 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-devel 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-perl 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-static 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl-debuginfo 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl-devel 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl-perl 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl-static 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-debuginfo 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-devel 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-perl 0:1.0.1e-16.el6_5.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-static 0:1.0.1e-16.el6_5.4

Vulnerabilities 3

  • Unscored —
    CVE-2013-4353 EPSS 12%

    The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial …

    openssl Debian
  • Unscored —
    CVE-2013-6449 EPSS 21%

    The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorr…

    openssl Debian
  • Unscored —
    CVE-2013-6450 EPSS 15%

    The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintai…

    openssl Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1045363
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1047840
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1049058
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0015.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4353
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4353
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4353
  • report
    https://access.redhat.com/security/cve/CVE-2013-6449
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6449
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6449
  • report
    https://access.redhat.com/security/cve/CVE-2013-6450
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6450
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6450