Oval Definition:oval:com.redhat.rhsa:def:20152617
Revision Date:2015-12-14Version:637
Title:RHSA-2015:2617: openssl security update (Moderate)
Description:OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library.

  • A NULL pointer derefernce flaw was found in the way OpenSSL verified signatures using the RSA PSS algorithm. A remote attacked could possibly use this flaw to crash a TLS/SSL client using OpenSSL, or a TLS/SSL server using OpenSSL if it enabled client authentication. (CVE-2015-3194)

  • A memory leak vulnerability was found in the way OpenSSL parsed PKCS#7 and CMS data. A remote attacker could use this flaw to cause an application that parses PKCS#7 or CMS data from untrusted sources to use an excessive amount of memory and possibly crash. (CVE-2015-3195)

  • A race condition flaw, leading to a double free, was found in the way OpenSSL handled pre-shared key (PSK) identify hints. A remote attacker could use this flaw to crash a multi-threaded SSL/TLS client using OpenSSL. (CVE-2015-3196)

    All openssl users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2015-3194
    CVE-2015-3195
    CVE-2015-3196
    RHSA-2015:2617
    RHSA-2015:2617-00
    RHSA-2015:2617-01
    Platform(s):Red Hat Enterprise Linux 6
    Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • openssl is earlier than 0:1.0.1e-42.el6_7.1
  • AND openssl is signed with Red Hat redhatrelease2 key
  • openssl-devel is earlier than 0:1.0.1e-42.el6_7.1
  • AND openssl-devel is signed with Red Hat redhatrelease2 key
  • openssl-perl is earlier than 0:1.0.1e-42.el6_7.1
  • AND openssl-perl is signed with Red Hat redhatrelease2 key
  • openssl-static is earlier than 0:1.0.1e-42.el6_7.1
  • AND openssl-static is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • openssl is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl is signed with Red Hat redhatrelease2 key
  • openssl-devel is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl-devel is signed with Red Hat redhatrelease2 key
  • openssl-libs is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl-libs is signed with Red Hat redhatrelease2 key
  • openssl-perl is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl-perl is signed with Red Hat redhatrelease2 key
  • openssl-static is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl-static is signed with Red Hat redhatrelease2 key
  • Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 6 Client is installed
  • OR Red Hat Enterprise Linux 6 Server is installed
  • OR Red Hat Enterprise Linux 6 Workstation is installed
  • OR Red Hat Enterprise Linux 6 ComputeNode is installed
  • AND
  • openssl is earlier than 0:1.0.1e-42.el6_7.1
  • AND openssl is signed with Red Hat redhatrelease2 key
  • openssl-devel is earlier than 0:1.0.1e-42.el6_7.1
  • AND openssl-devel is signed with Red Hat redhatrelease2 key
  • openssl-perl is earlier than 0:1.0.1e-42.el6_7.1
  • AND openssl-perl is signed with Red Hat redhatrelease2 key
  • openssl-static is earlier than 0:1.0.1e-42.el6_7.1
  • AND openssl-static is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 7 Client is installed
  • OR Red Hat Enterprise Linux 7 Server is installed
  • OR Red Hat Enterprise Linux 7 Workstation is installed
  • OR Red Hat Enterprise Linux 7 ComputeNode is installed
  • AND
  • openssl is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl is signed with Red Hat redhatrelease2 key
  • openssl-devel is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl-devel is signed with Red Hat redhatrelease2 key
  • openssl-libs is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl-libs is signed with Red Hat redhatrelease2 key
  • openssl-perl is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl-perl is signed with Red Hat redhatrelease2 key
  • openssl-static is earlier than 1:1.0.1e-51.el7_2.1
  • AND openssl-static is signed with Red Hat redhatrelease2 key
  • BACK