RHSA-2012:1306High

Red Hat Security Advisory: openssl security update

Published
September 24, 2012
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2011-4108 →CVE-2011-4109 →CVE-2011-4576 →CVE-2011-4619 →CVE-2012-0884 →CVE-2012-1165 →CVE-2012-2110 →CVE-2012-2333 →

📋 Description

CVE-2011-4108 — openssl: DTLS plaintext recovery attack CVE-2011-4109 — openssl: double-free in policy checks CVE-2011-4576 — openssl: uninitialized SSL 3.0 padding CVE-2011-4619 — openssl: SGC restart DoS attack CVE-2012-0884 — openssl: CMS and PKCS#7 Bleichenbacher attack CVE-2012-1165 — openssl: mime_param_cmp NULL dereference crash CVE-2012-2110 — openssl: asn1_d2i_read_bio integer errors leading to buffer overflow CVE-2012-2333 — openssl: record length handling integer underflow

🎯 Affected products1

  • Red Hat JBoss Web Server 1.0

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing JBoss Enterprise Web Server installation (including all applications and configuration files). The Apache HTTP Server must be restarted for this update to take effect.

🔗 References (12)