Lucene search

K
oraclelinuxOracleELSA-2010-0162
HistoryMar 25, 2010 - 12:00 a.m.

openssl security update

2010-03-2500:00:00
Oracle
linux.oracle.com
15

0.08 Low

EPSS

Percentile

93.6%

[0.9.8e-12.6]

  • fix CVE-2009-3245 - add missing bn_wexpand return checks (#570924)
    [0.9.8e-12.5]
  • fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)
    [0.9.8e-12.4]
  • do not disable SSLv2 in the renegotiation patch - SSLv2 does
    not support renegotiation
  • allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT
    [0.9.8e-12.3]
  • mention the RFC5746 in the CVE-2009-3555 doc
    [0.9.8e-12.2]
  • fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)