RHSA-2011:1409: Moderate: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)and Transport Layer Security (TLS v1) protocols, as well as afull-strength, general purpose cryptography library.An uninitialized variable use flaw was found in OpenSSL. This flaw couldcause an application using the OpenSSL Certificate Revocation List (CRL)checking functionality to incorrectly accept a CRL that has a nextUpdatedate in the past. (CVE-2011-3207)All OpenSSL users should upgrade to these updated packages, which contain abackported patch to resolve this issue. For the update to take effect, allservices linked to the OpenSSL library must be restarted, or the systemrebooted.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2011:1409?
The severity of RHSA-2011:1409 is classified as moderate.
How do I fix RHSA-2011:1409?
To fix RHSA-2011:1409, upgrade to OpenSSL version 1.0.0-10.el6_1.5 or later.
Which software is affected by RHSA-2011:1409?
RHSA-2011:1409 affects OpenSSL and its associated packages such as openssl-devel and openssl-perl.
What is the cause of RHSA-2011:1409?
RHSA-2011:1409 is caused by an uninitialized variable use flaw discovered in OpenSSL.
When was the RHSA-2011:1409 vulnerability identified?
The RHSA-2011:1409 vulnerability was identified in the year 2011.