Lucene search

K
oraclelinuxOracleELSA-2010-0163
HistoryMar 25, 2010 - 12:00 a.m.

openssl security update

2010-03-2500:00:00
Oracle
linux.oracle.com
13

0.173 Low

EPSS

Percentile

95.6%

[0.9.7a-43.17.5]

  • do not disable SSLv2 in the renegotiation patch - SSLv2 does
    not support renegotiation
  • allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT
    [0.9.7a-43.17.4]
  • mention the RFC5746 in the renegotiation fix doc
    [0.9.7a-43.17.3]
  • CVE-2009-3555 - support the secure renegotiation RFC (#533125)
  • CVE-2009-2409 - drop MD2 from the default algorithm list (#510197)
  • CVE-2009-0590 - crash when printing incorrect asn1 strings (#492304)