elsa-2015-3010
oracle_linux
Description
[0.9.8e-32.0.1] - Backport openssl 08-Jan-2015 security fixes (John Haxby) [orabug 20409893] - fix CVE-2014-3570 - Bignum squaring may produce incorrect results - fix CVE-2014-3571 - DTLS segmentation fault in dtls1_get_record - fix CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client] - fix CVE-2014-8275 - Certificate fingerprints can be modified - fix CVE-2015-0204 - RSA silently downgrades to EXPORT_RSA [Client]
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cves": [
"CVE-2014-8275",
"CVE-2014-3571",
"CVE-2014-3570",
"CVE-2015-0204",
"CVE-2014-3572"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[0.9.8e-32.0.1]\n- Backport openssl 08-Jan-2015 security fixes (John Haxby) [orabug 20409893]\n- fix CVE-2014-3570 - Bignum squaring may produce incorrect results\n- fix CVE-2014-3571 - DTLS segmentation fault in dtls1_get_record\n- fix CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client]\n- fix CVE-2014-8275 - Certificate fingerprints can be modified\n- fix CVE-2015-0204 - RSA silently downgrades to EXPORT_RSA [Client]",
"id": "ELSA-2015-3010",
"ovalId": "oval:com.oracle.elsa:def:20153010",
"source": "oracle_linux",
"title": "ELSA-2015-3010: openssl security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2015-3010.html"
}