RHSA-2013:0783Medium

Red Hat Security Advisory: openssl security update

Published
May 1, 2013
Last Modified
November 7, 2026

🔗 CVE IDs covered (2)

CVE-2013-0166 →CVE-2013-0169 →

📋 Description

CVE-2013-0166 — openssl: DoS due to improper handling of OCSP response verification CVE-2013-0169 — SSL/TLS: CBC padding timing attack (lucky-13)

🎯 Affected products1

  • Red Hat JBoss Enterprise Application Platform 5.2

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing JBoss Enterprise Application Platform installation (including all applications and configuration files). JBoss server instances configured to use the Tomcat Native library must be restarted for this update to take effect. Workaround: On OpenShift Container Platform 3.11 it's possible to edit the list of cipher suites offered by the router when performing 'edge', or 're-encrypt' TLS modes. Please follow the documentation [1], and [2] to remove the vulnerable CBC ciphers use the modern, or intermediate cipher suites outlined by Mozilla instead [3]. In 'passthrough' mode TLS termination occurs in the application so that is another way to mitigate the vulnerability. [1] https://docs.openshift.com/container-platform/3.11/install_config/router/customized_haproxy_router.html#obtaining-router-configuration-template [2] https://docs.openshift.com/container-platform/3.11/install_config/router/customized_haproxy_router.html#using-configmap-replace-template [3] https://wiki.mozilla.org/Security/Server_Side_TLS

🔗 References (6)