Loading story…
OpenSSL remediated three vulnerabilities: CVE-2019-1547, an ECDSA timing side channel that could expose private keys when applications use explicit EC parameters without a cofactor; CVE-2019-1549, in which OpenSSL 1.1.1–1.1.1c may allow parent and child processes to share RNG state after fork(); and CVE-2019-1563, a Bleichenbacher-style RSA padding oracle in CMS/PKCS#7 decryption. Exploiting the ECDSA and CMS issues requires many observed signature timings or chosen-ciphertext decryption attempts, respectively; normal TLS use through libssl is not affected by CVE-2019-1547.
Upstream fixes are available in OpenSSL 1.1.1d, 1.1.0l, and 1.0.2t, with CVE-2019-1549 fixed in 1.1.1d. Red Hat shipped backported fixes for affected JBoss Core Services Apache HTTP Server packages and RHEL 8 OpenSSL packages, advising customers to restart OpenSSL-linked services or reboot after installation. Slackware also released updated OpenSSL packages for 14.2 and -current. Organizations should patch supported OpenSSL deployments and prioritize review of applications that use explicit EC parameters, CMS/PKCS#7 RSA decryption, or forked processes relying on cryptographic randomness.
See affected versions and whether adversaries are exploiting it.
12 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2020:1840, providing OpenSSL 1.1.1c-15.el8 for RHEL 8 and remediating CVE-2019-1547, CVE-2019-1549, and CVE-2019-1563. Red Hat advised restarting OpenSSL-linked services or rebooting after installation.
Red Hat issued RHSA-2020:1336 and RHSA-2020:1337 for JBoss Core Services Apache HTTP Server 2.4.37 Service Pack 2, replacing SP1. The updates fixed CVE-2019-1547, CVE-2019-1549, CVE-2019-1563, CVE-2020-1927, and several Apache HTTP Server flaws across supported RHEL deployments and, for RHSA-2020:1336, Windows.
Guilherme de Almeida Suckevicz recorded CVE-2020-1927, an Apache HTTP Server mod_rewrite flaw in which encoded newline characters can redirect users to an unexpected URL.
Slackware Security Team released SSA:2019-254-03 with OpenSSL 1.0.2t packages for Slackware 14.2 and OpenSSL 1.1.1d packages for -current. The updates remediated the ECDSA cofactor-handling and CMS/PKCS#7 padding-oracle flaws.
OpenSSL disclosed CVE-2019-1547, CVE-2019-1549, and CVE-2019-1563, affecting ECDSA handling, RNG fork protection, and CMS/PKCS#7 decryption respectively. It advised upgrades to OpenSSL 1.1.1d, 1.1.0l, or 1.0.2t, as applicable.
OpenSSL received Bernd Edlinger's report for CVE-2019-1563, a Bleichenbacher-style padding-oracle issue in CMS and PKCS#7 decryption functions.
OpenSSL received a report of CVE-2019-1547, an ECDSA timing side channel affecting explicitly parameterized EC groups that lack a cofactor.
Oracle included Oracle HTTP Server in its July 2019 Critical Patch Update advisory for a disclosed TLS CBC padding-oracle vulnerability.
OpenSSL received Matt Caswell's report for CVE-2019-1549, concerning missing default fork protection in the OpenSSL 1.1.1 random-number generator.
CVE-2019-1559, an OpenSSL TLS padding-oracle vulnerability involving repeated SSL_shutdown() calls after a fatal protocol error, was publicly disclosed. The flaw affected OpenSSL 1.0.2 through 1.0.2q and was fixed in OpenSSL 1.0.2r.
Red Hat addressed CVE-2019-1559 through advisories for RHEL 6 and 7, Red Hat Virtualization 4 on RHEL 7, and JBoss Web Server products. Red Hat also noted that JBoss Web Server 3 was outside security support scope and documented disabling SHA384 as a possible workaround where cipher configuration permits it.
Fedora published update FEDORA-EPEL-2020-ff94ccbdec to the EPEL 7 stable repository to address the affected OpenSSL issues, including CVE-2019-1547 and CVE-2019-1563.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
18 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourcecve.org
Open sourcecve.org
Open sourcegithub.com
Open sourceseclists.org
Open sourceopenssl.org
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
OpenSSL released updates **1.1.0d** and **1.0.2k** to address several Moderate-severity defects, including `CVE-2017-3731`, an integer-underflow out-of-bounds read that lets specially truncated TLS packets crash affected 32-bit clients or servers using vulnerable cipher suites such as RC4-MD5. The releases also addressed `CVE-2017-3730`, in which malicious DHE or ECDHE parameters can trigger a NULL-pointer dereference in clients, and `CVE-2017-3732`, a carry-propagation flaw in x86_64 Montgomery squaring that can yield incorrect cryptographic results. Exploiting the latter against RSA or DSA is considered highly impractical; a Diffie-Hellman attack is more feasible only under restrictive conditions involving unpatched systems, persistent shared DH parameters, and substantial resources. Red Hat shipped updated OpenSSL packages for RHEL 6 and 7 through **RHSA-2017:0286**, remediating `CVE-2017-3731` and `CVE-2016-8610`. The latter allows unauthenticated attackers to send large volumes of malformed plaintext TLS/SSL ALERT messages during handshakes, consuming server CPU and preventing new connections; Nginx deployments were identified as affected, while Apache HTTP Server was not. Organizations should apply the vendor updates, restart all services linked to OpenSSL or reboot hosts, disable RC4-MD5 where updates cannot be immediately deployed, and retire unsupported OpenSSL 1.0.1, 1.0.0, and 0.9.8 installations.
Aug 29, 2026
OpenSSL released fixes for seven vulnerabilities affecting older 1.0.1 and 1.0.2 branches, including high-severity `CVE-2016-2108`, an ASN.1 parsing and encoding flaw that can cause an out-of-bounds write and potentially exploitable memory corruption when untrusted ASN.1 data with `ANY` fields is reserialized. The release also fixed `CVE-2016-2107`, which permits a man-in-the-middle TLS/DTLS AES-CBC padding-oracle attack on AES-NI-capable servers, alongside denial-of-service, excessive-allocation, and EBCDIC overread issues. The update additionally remediates heap-corruption defects `CVE-2016-2105` and `CVE-2016-2106` in the `EVP_EncodeUpdate()` and `EVP_EncryptUpdate()` APIs, respectively. Applications that directly submit exceptionally large input to these APIs may be vulnerable, while OpenSSL’s bounded internal PEM uses were not affected. OpenSSL issued versions 1.0.2h and 1.0.1t for most fixes, and Red Hat shipped patched RHEL 6 and RHEL 6.7 EUS packages; affected organizations should update and restart OpenSSL-linked services or reboot systems.
Aug 29, 2026
OpenSSL released versions **1.0.1u** and **1.0.2i** to correct multiple vulnerabilities affecting earlier releases. The flaws include DTLS denial-of-service issues: `CVE-2016-2181`, which lets an attacker advance a connection’s replay-protection window with an unauthenticated future-epoch record and cause valid packets to be discarded, and `CVE-2016-2179`, which can retain unnecessary out-of-order handshake fragments and consume roughly 1.5 MB of memory per DTLS connection. `CVE-2016-6302` can also crash servers using a custom SHA-512 TLS session-ticket HMAC callback through an integer underflow and out-of-bounds read. The updates additionally address memory-safety defects in certificate and utility processing. `CVE-2016-2182` is an out-of-bounds write in `BN_bn2dec()` caused by unchecked `BN_div_word()` failures when handling oversized BIGNUM values, while `CVE-2016-2180` can cause an out-of-bounds read when the `openssl ts` utility parses crafted time-stamp data containing large OIDs. `CVE-2016-6306` involves a small out-of-bounds read in certificate-message handling when client authentication is enabled. Red Hat issued fixes for affected RHEL 6 and 7 packages, including RHSA-2016:1940, with later JBoss Core Services updates for `CVE-2016-2182`.
Aug 28, 2026