{
  "cves": [
    "CVE-2014-8275",
    "CVE-2014-3571",
    "CVE-2014-3570",
    "CVE-2015-0204",
    "CVE-2014-3572"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[0.9.8e-32.0.1]\n- Backport openssl 08-Jan-2015 security fixes (John Haxby) [orabug 20409893]\n- fix CVE-2014-3570 - Bignum squaring may produce incorrect results\n- fix CVE-2014-3571 - DTLS segmentation fault in dtls1_get_record\n- fix CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client]\n- fix CVE-2014-8275 - Certificate fingerprints can be modified\n- fix CVE-2015-0204 - RSA silently downgrades to EXPORT_RSA [Client]",
  "id": "ELSA-2015-3010",
  "ovalId": "oval:com.oracle.elsa:def:20153010",
  "source": "oracle_linux",
  "title": "ELSA-2015-3010:  openssl security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2015-3010.html"
}