Red Hat Security AdvisoryRHSA-2015:1072
openssl security update
Released 2015-06-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.1e-42.el7_1.6, openssl-libs-1:1.0.1e-42.el7_1.6
- Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.1e-42.el7_1.6, openssl-perl-1:1.0.1e-42.el7_1.6, openssl-static-1:1.0.1e-42.el7_1.6
- Red Hat Enterprise Linux ComputeNode (v. 7) openssl-1:1.0.1e-42.el7_1.6, openssl-libs-1:1.0.1e-42.el7_1.6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.1e-42.el7_1.6, openssl-perl-1:1.0.1e-42.el7_1.6, openssl-static-1:1.0.1e-42.el7_1.6
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.1e-30.el6_6.9
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-devel-1.0.1e-30.el6_6.9, openssl-perl-1.0.1e-30.el6_6.9, openssl-static-1.0.1e-30.el6_6.9
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.1e-30.el6_6.9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-devel-1.0.1e-30.el6_6.9, openssl-perl-1.0.1e-30.el6_6.9, openssl-static-1.0.1e-30.el6_6.9
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.1e-30.el6_6.9, openssl-1.0.1e-30.el6_6.9.ppc, openssl-devel-1.0.1e-30.el6_6.9 +1
- Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.1e-42.ael7b_1.6, openssl-1:1.0.1e-42.el7_1.6, openssl-devel-1:1.0.1e-42.ael7b_1.6 +5
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl-1.0.1e-30.el6_6.9, openssl-static-1.0.1e-30.el6_6.9
- Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.1e-42.ael7b_1.6, openssl-perl-1:1.0.1e-42.el7_1.6, openssl-static-1:1.0.1e-42.ael7b_1.6 +2
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.1e-30.el6_6.9, openssl-devel-1.0.1e-30.el6_6.9
- Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.1e-42.el7_1.6, openssl-devel-1:1.0.1e-42.el7_1.6, openssl-libs-1:1.0.1e-42.el7_1.6
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl-1.0.1e-30.el6_6.9, openssl-static-1.0.1e-30.el6_6.9
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.1e-42.el7_1.6, openssl-static-1:1.0.1e-42.el7_1.6
Fixes 1 record
Priority MEDIUM 63
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgra…
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.9986 · Published 2015-05-21 · Partial fix CWE-295
