First published: Tue Aug 06 2019(Updated: )
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.<br>Security Fix(es):<br><li> openssl: 0-byte record padding oracle (CVE-2019-1559)</li> <li> openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/openssl | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-debuginfo | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-debuginfo | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-devel | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-devel | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-libs | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-libs | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-perl | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-static | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-static | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-perl | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-debuginfo | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-devel | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-libs | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-perl | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
redhat/openssl-static | <1.0.2k-19.el7 | 1.0.2k-19.el7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.