Skip to content
OpenAdvisories
Unscored RHSA-2015:1115 6 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 44

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client openssl 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::client openssl-debuginfo 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::client openssl-devel 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::client openssl-perl 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::client openssl-static 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-debuginfo 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-devel 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-perl 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-static 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::server openssl 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::server openssl-debuginfo 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::server openssl-devel 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::server openssl-perl 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::server openssl-static 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-debuginfo 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-devel 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-perl 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-static 0:1.0.1e-30.el6_6.11
Red Hat · RHEL 7 enterprise_linux:7::client openssl 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::client openssl-debuginfo 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::client openssl-devel 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::client openssl-libs 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::client openssl-perl 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::client openssl-static 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-debuginfo 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-devel 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-libs 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-perl 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-static 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::server openssl 1:1.0.1e-42.ael7b_1.8
Red Hat · RHEL 7 enterprise_linux:7::server openssl-debuginfo 1:1.0.1e-42.ael7b_1.8
Red Hat · RHEL 7 enterprise_linux:7::server openssl-devel 1:1.0.1e-42.ael7b_1.8
Red Hat · RHEL 7 enterprise_linux:7::server openssl-libs 1:1.0.1e-42.ael7b_1.8
Red Hat · RHEL 7 enterprise_linux:7::server openssl-perl 1:1.0.1e-42.ael7b_1.8
Red Hat · RHEL 7 enterprise_linux:7::server openssl-static 1:1.0.1e-42.ael7b_1.8
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-debuginfo 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-devel 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-libs 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-perl 1:1.0.1e-42.el7_1.8
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-static 1:1.0.1e-42.el7_1.8

Vulnerabilities 6

  • Unscored —
    CVE-2014-8176 EPSS 17%

    The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-1789 EPSS 76%

    The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-1790 Public exploit EPSS 24%

    The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-1791 Public exploit EPSS 17%

    Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-1792 Public exploit EPSS 23%

    The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-3216

    Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL,…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://www.openssl.org/news/secadv_20150611.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1227574
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228607
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228608
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228611
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1115.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-8176
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8176
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8176
  • report
    https://access.redhat.com/security/cve/CVE-2015-1789
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1789
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1789
  • report
    https://access.redhat.com/security/cve/CVE-2015-1790
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1790
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1790
  • report
    https://access.redhat.com/security/cve/CVE-2015-1791
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1791
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1791
  • report
    https://access.redhat.com/security/cve/CVE-2015-1792
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1792
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1792
  • report
    https://access.redhat.com/security/cve/CVE-2015-3216
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3216
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3216