RHSA-2020:5639: Important: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.<br>Security Fix(es):<br><li> openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:5639?
The severity of RHSA-2020:5639 is categorized as important due to the potential for denial of service.
How do I fix RHSA-2020:5639?
To fix RHSA-2020:5639, you should update the OpenSSL packages to version 1.0.1e-52.el7_2 or later.
What vulnerability is addressed by RHSA-2020:5639?
RHSA-2020:5639 addresses a NULL pointer dereference vulnerability identified as CVE-2020-1971 in OpenSSL.
Which packages are affected by RHSA-2020:5639?
RHSA-2020:5639 affects various OpenSSL packages including openssl, openssl-libs, openssl-devel, and others.
What are the potential impacts of not addressing RHSA-2020:5639?
Failing to address RHSA-2020:5639 may expose systems to denial of service attacks affecting the availability of services.