Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | openssl | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openssl-debuginfo | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openssl-devel | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openssl-libs | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openssl-perl | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openssl-static | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openssl | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openssl-debuginfo | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openssl-devel | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openssl-libs | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openssl-perl | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openssl-static | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openssl | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openssl-debuginfo | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openssl-devel | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openssl-libs | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openssl-perl | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openssl-static | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openssl | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openssl-debuginfo | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openssl-devel | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openssl-libs | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openssl-perl | 1:1.0.1e-34.el7_0.3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openssl-static | 1:1.0.1e-34.el7_0.3 |
Vulnerabilities 6
-
Unscored —CVE-2010-5298 EPSS 34%
Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is …
-
Unscored —
The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.…
-
Unscored —CVE-2014-0198 EPSS 40%
The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does no…
-
Unscored —
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1…
-
Unscored —
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCip…
-
Unscored —CVE-2014-3470 EPSS 86%
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 befor…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://access.redhat.com/site/articles/904433
-
article
https://access.redhat.com/site/solutions/905793
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1087195
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1093837
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1103586
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1103593
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1103598
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1103600
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0679.json
-
report
https://access.redhat.com/security/cve/CVE-2010-5298
-
advisory
https://www.cve.org/CVERecord?id=CVE-2010-5298
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-5298
-
article
https://www.openssl.org/news/secadv_20140605.txt
-
report
https://access.redhat.com/security/cve/CVE-2014-0195
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-0195
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-0195
-
report
https://access.redhat.com/security/cve/CVE-2014-0198
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-0198
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-0198
-
report
https://access.redhat.com/security/cve/CVE-2014-0221
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-0221
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-0221
-
report
https://access.redhat.com/security/cve/CVE-2014-0224
-
article
https://access.redhat.com/security/vulnerabilities/OpenSSL-CCS-Injection
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-0224
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-0224
-
report
https://access.redhat.com/security/cve/CVE-2014-3470
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3470
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3470