RHSA-2012:1307High

Red Hat Security Advisory: openssl security update

Published
September 24, 2012
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2011-4108 →CVE-2011-4109 →CVE-2011-4576 →CVE-2011-4619 →CVE-2012-0884 →CVE-2012-1165 →CVE-2012-2110 →CVE-2012-2333 →

📋 Description

CVE-2011-4108 — openssl: DTLS plaintext recovery attack CVE-2011-4109 — openssl: double-free in policy checks CVE-2011-4576 — openssl: uninitialized SSL 3.0 padding CVE-2011-4619 — openssl: SGC restart DoS attack CVE-2012-0884 — openssl: CMS and PKCS#7 Bleichenbacher attack CVE-2012-1165 — openssl: mime_param_cmp NULL dereference crash CVE-2012-2110 — openssl: asn1_d2i_read_bio integer errors leading to buffer overflow CVE-2012-2333 — openssl: record length handling integer underflow

🎯 Affected products1

  • Red Hat JBoss Enterprise Application Platform 5.1

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing JBoss Enterprise Application Platform installation (including all applications and configuration files). JBoss server instances configured to use the Tomcat Native library must be restarted for this update to take effect.

🔗 References (12)