Skip to content
OpenAdvisories
Medium RHSA-2020:5566 1 CVE

Red Hat Security Advisory: openssl security update

Published Sep 13, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client openssl 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client openssl-debuginfo 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client openssl-devel 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client openssl-libs 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client openssl-perl 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client openssl-static 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-debuginfo 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-devel 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-perl 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-static 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server openssl 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server openssl-debuginfo 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server openssl-devel 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server openssl-libs 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server openssl-perl 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server openssl-static 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-debuginfo 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-devel 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-libs 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-perl 1:1.0.2k-21.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-static 1:1.0.2k-21.el7_9

Vulnerabilities 1

  • Medium 5.9
    CVE-2020-1971 Public exploit

    EDIPARTYNAME NULL pointer dereference

    The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equa…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1903409
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5566.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-1971
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-1971
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-1971
  • article
    https://www.openssl.org/news/secadv/20201208.txt