Debian/openssl: unknown
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows re
Action: Upgrade openssl to 1.0.0e-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0e-1 | - |
Fixed versions
| 1.0.0e-1 |
Sources
published · modified · JSON