Summary
[1.0.1e-30.9]
- fix CVE-2015-4000 - prevent the logjam attack on client - restrict
the DH key size to at least 768 bits (limit will be increased in future)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssl | 1:1.0.1e-42.el7_1.6 |
| Oracle Linux · 7 | openssl-devel | 1:1.0.1e-42.el7_1.6 |
| Oracle Linux · 7 | openssl-libs | 1:1.0.1e-42.el7_1.6 |
| Oracle Linux · 7 | openssl-perl | 1:1.0.1e-42.el7_1.6 |
| Oracle Linux · 7 | openssl-static | 1:1.0.1e-42.el7_1.6 |
Vulnerabilities 1
-
Low 3.7
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pr…