CVE-2009-0161: The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid...

Security readout for executives and security teams

This flaw affected Apple Mac OS X 10.5 systems before 10.5.7 when Ruby used OpenSSL OCSP checks. An invalid certificate-status response could be treated as valid, potentially letting a revoked certificate pass authentication. It matters mainly for legacy systems or applications that still depend on that Ruby OCSP behavior. Exposure is likely limited to obsolete Apple Mac OS X 10.5 deployments before 10.5.7, especially Ruby applications relying on OpenSSL::OCSP for certificate revocation checks. Treat as a legacy risk cleanup item unless pre-10.5.7 Mac OS X systems still support sensitive certificate-based authentication. If they do, prioritize remediation because trust validation may be bypassed. Mitigation focus: Upgrade affected Mac OS X 10.5 systems to 10.5.7 or later per Apple guidance.; Retire or isolate unsupported Mac OS X 10.5 hosts where upgrading is not feasible.; Check vendor guidance for any legacy Ruby OpenSSL::OCSP dependencies..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.