Fedora 20 Security Update: openssl-1.0.1e-42.fc20

Resolved Bugs
1196738 – CVE-2015-0292 CVE-2015-0209 CVE-2015-0287 CVE-2015-0286 CVE-2015-0289 CVE-2015-0288 openssl: various flaws [fedora-all]
1202366 – CVE-2015-0286 openssl: invalid pointer use in ASN1_TYPE_cmp()
1202384 – CVE-2015-0289 openssl: PKCS7 NULL pointer dereference
1202404 – CVE-2015-0293 openssl: assertion failure in SSLv2 servers
1196737 – CVE-2015-0209 openssl: use-after-free on invalid EC private key import
1202380 – CVE-2015-0287 openssl: ASN.1 structure reuse memory corruption
1202395 – CVE-2015-0292 openssl: integer underflow leading to buffer overflow in base64 decoding
1202418 – CVE-2015-0288 openssl: X509_to_X509_REQ NULL pointer dereference<br
Security fix for CVE-2015-0209, CVE-2015-0289, CVE-2015-0292, CVE-2015-0287, CVE-2015-0286, CVE-2015-0288

Leave a Reply