Description
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 0.9.8o-4 | — |
| Debian 13 | openssl | 0.9.8o-4 | — |
| Debian 12 | openssl | 0.9.8o-4 | — |
| Debian 5.0 | openssl | 0.9.8g-15+lenny11 | DSA-2141-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | openssl +3 | 1.0.0-4.el6_0.2 | RHSA-2010:0979 |
| RHEL 5 | openssl +2 | 0.9.8e-12.el5_5.7 | RHSA-2010:0978 |
| RHEL 4 | openssl +2 | 0.9.7a-43.17.el4_8.6 | RHSA-2010:0977 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
Advisories 6
- RHSA-2010:0977 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0978 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2010:0979 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2141-1 openssl - protocol design flaw Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-403 Forbidden-1 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-403 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
References
- SUSE-SR:2011:001 vendor-advisory
- 1024822 vdb-entry
- 42473 third-party-advisory
- 42571 third-party-advisory
- 43170 third-party-advisory
- SSA:2010-340-01 vendor-advisory
- ADV-2011-0268 vdb-entry
- SUSE-SR:2011:009 vendor-advisory
- http://support.apple.com/kb/HT4723
- SUSE-SU-2011:0847 vendor-advisory
- 42493 third-party-advisory
- 43173 third-party-advisory
- FEDORA-2010-18765 vendor-advisory
- ADV-2011-0032 vdb-entry
- openSUSE-SU-2011:0845 vendor-advisory
- 43171 third-party-advisory
- 42620 third-party-advisory
- SSRT100817 vendor-advisory
- APPLE-SA-2011-06-23-1 vendor-advisory
- USN-1029-1 vendor-advisory
- ADV-2010-3120 vdb-entry
- FEDORA-2010-18736 vendor-advisory
- ADV-2010-3122 vdb-entry
- 43169 third-party-advisory
- 43172 third-party-advisory
- HPSBHF02706 vendor-advisory
- 45164 vdb-entry
- 69565 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=659462
- VU#737740 third-party-advisory
- 42469 third-party-advisory
- SSRT100475 vendor-advisory
- 42877 third-party-advisory
- http://cvs.openssl.org/chngview?cn=20131
- RHSA-2010:0977 vendor-advisory
- HPSBMA02658 vendor-advisory
- ADV-2010-3134 vdb-entry
- ADV-2010-3188 vdb-entry
- oval:org.mitre.oval:def:18910 vdb-entry signature
- HPSBUX02638 vendor-advisory
- ADV-2011-0076 vdb-entry
- http://openssl.org/news/secadv_20101202.txt
- RHSA-2010:0978 vendor-advisory
- 44269 third-party-advisory
- RHSA-2011:0896 vendor-advisory
- DSA-2141 vendor-advisory
- MDVSA-2010:248 vendor-advisory
- RHSA-2010:0979 vendor-advisory
- https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST
- 42811 third-party-advisory