Lucene search

K
oraclelinuxOracleELSA-2014-1653
HistoryOct 16, 2014 - 12:00 a.m.

openssl security update

2014-10-1600:00:00
Oracle
linux.oracle.com
24

0.975 High

EPSS

Percentile

100.0%

[0.9.8e-31]

  • add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)
    [0.9.8e-30]
  • fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  • fix CVE-2014-3505 - doublefree in DTLS packet processing
  • fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  • fix CVE-2014-3508 - fix OID handling to avoid information leak
  • fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
    [0.9.8e-29]
  • fix for CVE-2014-0224 - SSL/TLS MITM vulnerability
    [0.9.8e-28]
  • replace expired GlobalSign Root CA certificate in ca-bundle.crt