title: Red Hat Security Advisory: openssl security update
description: openssl: Possible integer overflow vulnerabilities in codebase openssl: Non-constant time codepath followed for certain operations in DSA implementation openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer OpenSSL: OOB read in TS_OBJ_print_bio() openssl: DTLS replay protection bypass allows DoS against DTLS connection openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() openssl: Insufficient TLS session ticket HMAC length checks openssl: OCSP Status Request extension unbounded memory growth openssl: certificate message OOB reads
cpes: cpe:/o:redhat:enterprise_linux:6::client cpe:/o:redhat:enterprise_linux:6::computenode cpe:/o:redhat:enterprise_linux:6::server cpe:/o:redhat:enterprise_linux:6::workstation cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation