openssl: protocol rollback [LWN.net]

Package(s):

openssl

CVE #(s):

CAN-2005-2969

Created:

October 12, 2005

Updated:

December 19, 2005

Description:

OpenSSL prior to version 0.9.7h or 0.9.8a contains a vulnerability which could enable an attacker to force the use of the older, less secure SSL 2.0 protocol. See this advisory for details or this analysis for even more details.

Alerts:

Fedora-Legacy	FLSA:166939	2005-12-17
Debian	DSA-888-1	2005-11-07
Debian	DSA-882-1	2005-11-04
Debian	DSA-881-1	2005-11-04
Debian	DSA-875-1	2005-10-27
SuSE	SUSE-SA:2005:061	2005-10-19
OpenPKG	OpenPKG-SA-2005.022	2005-10-17
Fedora	FEDORA-2005-986	2005-10-13
Fedora	FEDORA-2005-985	2005-10-13
Ubuntu	USN-204-1	2005-10-14
Slackware	SSA:2005-286-01	2005-10-14
Mandriva	MDKSA-2005:179	2005-10-11
Gentoo	200510-11	2005-10-12
Red Hat	RHSA-2005:800-01	2005-10-11

(Log in to post comments)

openssl: protocol rollback

Posted Oct 13, 2005 7:36 UTC (Thu) by mjcox@redhat.com (guest, #31775) [Link]

Missing:

Red Hat http://rhn.redhat.com/errata/RHSA-2005-800.html 2005-10-11