RHSA-2020:5641: Important: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.<br>Security Fix(es):<br><li> openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:5641?
RHSA-2020:5641 is classified as a moderate severity vulnerability.
How do I fix RHSA-2020:5641?
To address RHSA-2020:5641, update OpenSSL to version 1.0.2k-9.el7_4 or later.
What does RHSA-2020:5641 affect?
RHSA-2020:5641 affects specific versions of the OpenSSL package, including openssl, openssl-debuginfo, openssl-devel, and openssl-libs.
What is CVE-2020-1971 in relation to RHSA-2020:5641?
CVE-2020-1971 is the identifier for the vulnerability that RHSA-2020:5641 is addressing, which involves an EDIPARTYNAME NULL pointer dereference.
Is it safe to use OpenSSL versions prior to 1.0.2k-9.el7_4 after RHSA-2020:5641?
Using OpenSSL versions prior to 1.0.2k-9.el7_4 is not recommended due to the vulnerabilities outlined in RHSA-2020:5641.