ALAS-2011-004 --- opensslID: oval:org.secpod.oval:def:1601250 | Date: (C)2020-11-27 (M)2022-08-04 |
Class: PATCH | Family: unix |
An uninitialized variable use flaw was found in OpenSSL. This flaw could cause an application using the OpenSSL Certificate Revocation List checking functionality to incorrectly accept a CRL that has a nextUpdate date in the past.All OpenSSL users should upgrade to these updated packages, which contain a backported patch to resolve this issue. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.
Platform: |
Amazon Linux AMI |