Red Hat Security AdvisoryRHSA-2016:0008
openssl security update
Released 2016-01-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.1e-51.el7_2.2, openssl-libs-1:1.0.1e-51.el7_2.2
- Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.1e-51.el7_2.2, openssl-perl-1:1.0.1e-51.el7_2.2, openssl-static-1:1.0.1e-51.el7_2.2
- Red Hat Enterprise Linux ComputeNode (v. 7) openssl-1:1.0.1e-51.el7_2.2, openssl-libs-1:1.0.1e-51.el7_2.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.1e-51.el7_2.2, openssl-perl-1:1.0.1e-51.el7_2.2, openssl-static-1:1.0.1e-51.el7_2.2
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.1e-42.el6_7.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-devel-1.0.1e-42.el6_7.2, openssl-perl-1.0.1e-42.el6_7.2, openssl-static-1.0.1e-42.el6_7.2
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.1e-42.el6_7.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-devel-1.0.1e-42.el6_7.2, openssl-perl-1.0.1e-42.el6_7.2, openssl-static-1.0.1e-42.el6_7.2
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.1e-42.el6_7.2, openssl-1.0.1e-42.el6_7.2.ppc, openssl-devel-1.0.1e-42.el6_7.2 +1
- Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.1e-51.el7_2.2, openssl-devel-1:1.0.1e-51.el7_2.2, openssl-devel-1:1.0.1e-51.el7_2.2.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl-1.0.1e-42.el6_7.2, openssl-static-1.0.1e-42.el6_7.2
- Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.1e-51.el7_2.2, openssl-static-1:1.0.1e-51.el7_2.2, openssl-static-1:1.0.1e-51.el7_2.2.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.1e-42.el6_7.2, openssl-devel-1.0.1e-42.el6_7.2
- Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.1e-51.el7_2.2, openssl-devel-1:1.0.1e-51.el7_2.2, openssl-libs-1:1.0.1e-51.el7_2.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl-1.0.1e-42.el6_7.2, openssl-static-1.0.1e-42.el6_7.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.1e-51.el7_2.2, openssl-static-1:1.0.1e-51.el7_2.2
Fixes 1 record
Priority LOW 32
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Prot…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02904 · Published 2016-01-09 · Partial fix CWE-19
