Medium ELSA-2016-0008 1 CVE

Moderate: openssl security update (Oracle Linux 7)

Published Jan 7, 2016 · Updated Jan 7, 2016

Ecosystem: Oracle Linux

Summary

[1.0.1e-42.2]
- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	openssl	1:1.0.1e-51.el7_2.2
Oracle Linux · 7	openssl-devel	1:1.0.1e-51.el7_2.2
Oracle Linux · 7	openssl-libs	1:1.0.1e-51.el7_2.2
Oracle Linux · 7	openssl-perl	1:1.0.1e-51.el7_2.2
Oracle Linux · 7	openssl-static	1:1.0.1e-51.el7_2.2

Vulnerabilities 1

Unscored —

CVE-2015-7575

Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x be…

thunderbird firefox openssl openjdk-7 Debian Ubuntu

Jan 9, 2016