{"cves":["CVE-2015-0288","CVE-2015-0292","CVE-2015-0289","CVE-2014-8275","CVE-2015-0287","CVE-2015-0204","CVE-2015-0293"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[0.9.8e-33]\n- fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various\n  certificate fingerprint issues\n- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export\n  ciphersuites and on server\n- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption\n- fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference\n- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data\n- fix CVE-2015-0292 - integer underflow in base64 decoder\n- fix CVE-2015-0293 - triggerable assert in SSLv2 server","id":"ELSA-2015-0800","ovalId":"oval:com.oracle.elsa:def:20150800","source":"oracle_linux","title":"ELSA-2015-0800:  openssl security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2015-0800.html"}