Lucene search

K
oraclelinuxOracleLinuxELSA-2015-1115
HistoryJun 15, 2015 - 12:00 a.m.

openssl security update

2015-06-1500:00:00
linux.oracle.com
21

0.634 Medium

EPSS

Percentile

97.5%

[1.0.1e-42.8]

  • improved fix for CVE-2015-1791
  • add missing parts of CVE-2015-0209 fix for corectness although unexploitable
    [1.0.1e-42.7]
  • fix CVE-2014-8176 - invalid free in DTLS buffering code
  • fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  • fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  • fix CVE-2015-1791 - race condition handling NewSessionTicket
  • fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function
  • fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications