{"cves":["CVE-2014-3572","CVE-2015-0206","CVE-2015-0205","CVE-2014-3571","CVE-2014-3570","CVE-2014-8275","CVE-2015-0204"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[1.0.1e-34.7]\n- fix CVE-2014-3570 - incorrect computation in BN_sqr()\n- fix CVE-2014-3571 - possible crash in dtls1_get_record()\n- fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state\n- fix CVE-2014-8275 - various certificate fingerprint issues\n- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export\n  ciphersuites and on server\n- fix CVE-2015-0205 - do not allow unauthenticated client DH certificate\n- fix CVE-2015-0206 - possible memory leak when buffering DTLS records","id":"ELSA-2015-0066","ovalId":"oval:com.oracle.elsa:def:20150066","source":"oracle_linux","title":"ELSA-2015-0066:  openssl security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2015-0066.html"}