Skip to content
OpenAdvisories
Unscored RHSA-2015:2617 3 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 44

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client openssl 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::client openssl-debuginfo 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::client openssl-devel 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::client openssl-perl 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::client openssl-static 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-debuginfo 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-devel 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-perl 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-static 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::server openssl 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::server openssl-debuginfo 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::server openssl-devel 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::server openssl-perl 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::server openssl-static 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-debuginfo 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-devel 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-perl 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-static 0:1.0.1e-42.el6_7.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-debuginfo 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-devel 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-libs 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-perl 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-static 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-debuginfo 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-devel 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-libs 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-perl 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-static 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-debuginfo 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-devel 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-libs 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-perl 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-static 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-debuginfo 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-devel 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-libs 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-perl 1:1.0.1e-51.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-static 1:1.0.1e-51.el7_2.1

Vulnerabilities 3

  • Unscored —
    CVE-2015-3194 Public exploit EPSS 44%

    crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-3195 Public exploit EPSS 39%

    The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 be…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-3196 EPSS 14%

    ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threa…

    openssl openssl Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://openssl.org/news/secadv/20151203.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1288320
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1288322
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1288326
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2617.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-3194
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3194
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3194
  • report
    https://access.redhat.com/security/cve/CVE-2015-3195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3195
  • report
    https://access.redhat.com/security/cve/CVE-2015-3196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3196