RHEL 6 : openssl (RHSA-2015:0752)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0752 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a...

OracleVM 3.3 : openssl (OVMSA-2015-0039)

The remote OracleVM system is missing necessary patches to address critical security updates : - update fix for CVE-2015-0287 to what was released upstream - fix CVE-2015-0209 - potential use after free in d2iECPrivateKey - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison - fix...

Amazon Linux AMI : openssl (ALAS-2015-498)

A use-after-free flaw was found in the way OpenSSL importrf certain Elliptic Curve private keys. An attacker could use this flaw to crash OpenSSL, if a specially crafted certificate was imported. CVE-2015-0209 A denial of service flaw was found in the way OpenSSL handled certain SSLv2 messages. A...

RedHat Update for openssl RHSA-2015:0716-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 6 : openssl (CESA-2015:0715)

Updated OpenSSL packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

CentOS 7 : openssl (CESA-2015:0716)

Updated openssl packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Oracle Linux 7 : openssl (ELSA-2015-0716)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0716 advisory. - update fix for CVE-2015-0287 to what was released upstream - fix CVE-2015-0209 - potential use after free in d2iECPrivateKey - fix CVE-2015-0286 -...

openssl security update

CentOS Errata and Security Advisory CESA-2015:0715 Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt1.M70P.1

1.0.1k-alt1.M70P.1 built March 20, 2015 Gleb Fotengauer-Malinovskiy in task 142055 March 19, 2015 Gleb Fotengauer-Malinovskiy - Backported to p7 branch security: CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293...

Ubuntu: Security Advisory (USN-2537-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0293

The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service s2lib.c assertion failure and daemon exit via a crafted CLIENT-MASTER-KEY message...

BELL-CVE-2015-0293 CVE-2015-0293 does not affect BellSoft software

Bulletin has no description...

Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt2

March 19, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt2 - Fixed CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293...

CVE-2015-0293

CVE-2015-0293 affects the SSLv2 implementation in OpenSSL. The vulnerability allows a remote attacker to trigger a denial of service by sending a crafted CLIENT-MASTER-KEY message to servers that support SSLv2 and EXPORT-grade cipher suites, causing an assertion failure and daemon exit. Affected ...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt2

March 19, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt2 - Fixed CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293...

Security fix for the ALT Linux 9 package openssl10 version 1.0.1k-alt2

March 19, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt2 - Fixed CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt2

March 19, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt2 - Fixed CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293...

SUSE-SU-2015:0553-1 Security update for compat-openssl098

OpenSSL was updated to fix various security issues. Following security issues were fixed: - CVE-2015-0209: A Use After Free following d2iECPrivatekey error was fixed which could lead to crashes for attacker supplied Elliptic Curve keys. This could be exploited over SSL connections with client...