Logo
›
›component›openssl
Name
openssl
Version
4.0.3
Type
library
Description
Secure Socket Layer
Licenses
Apache-2.0
PURL
-
CPE
cpe:2.3:*:openssl:openssl:4.0.3:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
3.0.19
scarthgap
3.5.8

Patches#


#
Title
Author
Resolve
1
Configure: do not tweak mips cflags
Alexander Kanavin <alex@linutronix.de>
2
buildinfo: strip sysroot and debug-prefix-map from compiler
=?UTF-8?q?Martin=20Hundeb=C3=B8ll?= <martin@geanix.com>
3
extend check_cwm test timeout
Gyorgy Sarvari <skandigraun@gmail.com>

Vulnerabilities#


Name
Analysis
Description
False Positive
Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.