Oval Definition:	oval:com.redhat.rhsa:def:20160008
Revision Date: 2016-01-08 Version: 637 Title: RHSA-2016:0008: openssl security update (Moderate) Description: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library. A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client. (CVE-2015-7575) All openssl users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. Family: unix Class: patch Status: Reference(s): CVE-2015-7575 RHSA-2016:0008 RHSA-2016:0008-00 RHSA-2016:0008-01 Platform(s): Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 6 is installed AND openssl is earlier than 0:1.0.1e-42.el6_7.2 AND openssl is signed with Red Hat redhatrelease2 key openssl-devel is earlier than 0:1.0.1e-42.el6_7.2 AND openssl-devel is signed with Red Hat redhatrelease2 key openssl-perl is earlier than 0:1.0.1e-42.el6_7.2 AND openssl-perl is signed with Red Hat redhatrelease2 key openssl-static is earlier than 0:1.0.1e-42.el6_7.2 AND openssl-static is signed with Red Hat redhatrelease2 key OR Package Information Red Hat Enterprise Linux 7 is installed AND openssl is earlier than 1:1.0.1e-51.el7_2.2 AND openssl is signed with Red Hat redhatrelease2 key openssl-devel is earlier than 1:1.0.1e-51.el7_2.2 AND openssl-devel is signed with Red Hat redhatrelease2 key openssl-libs is earlier than 1:1.0.1e-51.el7_2.2 AND openssl-libs is signed with Red Hat redhatrelease2 key openssl-perl is earlier than 1:1.0.1e-51.el7_2.2 AND openssl-perl is signed with Red Hat redhatrelease2 key openssl-static is earlier than 1:1.0.1e-51.el7_2.2 AND openssl-static is signed with Red Hat redhatrelease2 key
BACK