Lucene search

K
oraclelinuxOracleLinuxELSA-2015-0800
HistoryApr 13, 2015 - 12:00 a.m.

openssl security update

2015-04-1300:00:00
linux.oracle.com
27

0.965 High

EPSS

Percentile

99.5%

[0.9.8e-33]

  • fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
    certificate fingerprint issues
  • fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  • fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  • fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  • fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  • fix CVE-2015-0292 - integer underflow in base64 decoder
  • fix CVE-2015-0293 - triggerable assert in SSLv2 server