{"cves":["CVE-2014-8275","CVE-2014-3571","CVE-2014-3570","CVE-2015-0204","CVE-2014-3572"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[0.9.8e-32.0.1]\n- Backport openssl 08-Jan-2015 security fixes (John Haxby) [orabug 20409893]\n- fix CVE-2014-3570 - Bignum squaring may produce incorrect results\n- fix CVE-2014-3571 - DTLS segmentation fault in dtls1_get_record\n- fix CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client]\n- fix CVE-2014-8275 - Certificate fingerprints can be modified\n- fix CVE-2015-0204 - RSA silently downgrades to EXPORT_RSA [Client]","id":"ELSA-2015-3010","ovalId":"oval:com.oracle.elsa:def:20153010","source":"oracle_linux","title":"ELSA-2015-3010:  openssl security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2015-3010.html"}