Skip to content
OpenAdvisories
Unscored RHSA-2019:0483 2 CVEs

Red Hat Security Advisory: openssl security and bug fix update

Published Sep 16, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client openssl 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-debuginfo 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-devel 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-libs 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-perl 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-static 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-debuginfo 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-devel 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-libs 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-perl 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-static 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-debuginfo 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-devel 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-libs 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-perl 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-static 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-debuginfo 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-devel 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-libs 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-perl 1:1.0.2k-16.el7_6.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-static 1:1.0.2k-16.el7_6.1

Vulnerabilities 2

  • Unscored —
    CVE-2018-0735

    Timing attack against ECDSA signature generation

    The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-5407 Public exploit

    Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…

    openssl openssl openssl openssl1.0 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1645695
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0483.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-0735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1644356
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-0735
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-0735
  • report
    https://access.redhat.com/security/cve/CVE-2018-5407
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-5407
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-5407
  • article
    https://github.com/bbbrumley/portsmash
  • article
    https://www.openssl.org/news/secadv/20181112.txt