openssl security update

CentOS Errata and Security Advisory CESA-2015:2616

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.

A memory leak vulnerability was found in the way OpenSSL parsed PKCS#7 and
CMS data. A remote attacker could use this flaw to cause an application
that parses PKCS#7 or CMS data from untrusted sources to use an excessive
amount of memory and possibly crash. (CVE-2015-3195)

All openssl users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. For the update to take
effect, all services linked to the OpenSSL library must be restarted, or
the system rebooted.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2015-December/083682.html

Affected packages:
openssl
openssl-devel
openssl-perl

Upstream details at:
https://access.redhat.com/errata/RHSA-2015:2616