RHSA-2011:1409: Moderate: openssl security update

First published: Wed Oct 26 2011(Updated: )

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)<br>and Transport Layer Security (TLS v1) protocols, as well as a<br>full-strength, general purpose cryptography library.<br>An uninitialized variable use flaw was found in OpenSSL. This flaw could<br>cause an application using the OpenSSL Certificate Revocation List (CRL)<br>checking functionality to incorrectly accept a CRL that has a nextUpdate<br>date in the past. (CVE-2011-3207)<br>All OpenSSL users should upgrade to these updated packages, which contain a<br>backported patch to resolve this issue. For the update to take effect, all<br>services linked to the OpenSSL library must be restarted, or the system<br>rebooted.<br>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/redhat-errata
• anchor-id/RHSA-2011:1409
• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• package-manager/redhat