openssl - security update

Fixed packages 2

Vulnerabilities 7

• Low 3.7
  CVE-2015-4000 Public exploit EPSS 100%

  The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pr…

  thunderbird firefox openssl openssl Debian Ubuntu
  May 21, 2015
• Unscored —
  CVE-2014-8176 EPSS 17%

  The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h…

  openssl openssl Debian Ubuntu
  Jun 12, 2015
• Unscored —
  CVE-2015-1788 Public exploit EPSS 21%

  The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n,…

  openssl openssl Debian Ubuntu
  Jun 12, 2015
• Unscored —
  CVE-2015-1789 EPSS 76%

  The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1…

  openssl openssl Debian Ubuntu
  Jun 12, 2015
• Unscored —
  CVE-2015-1790 Public exploit EPSS 24%

  The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.…

  openssl openssl Debian Ubuntu
  Jun 12, 2015
• Unscored —
  CVE-2015-1791 Public exploit EPSS 17%

  Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0…

  openssl openssl Debian Ubuntu
  Jun 12, 2015
• Unscored —
  CVE-2015-1792 Public exploit EPSS 23%

  The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n…

  openssl openssl Debian Ubuntu
  Jun 12, 2015