title: Red Hat Security Advisory: openssl security update
description: OpenSSL: Invalid free in DTLS OpenSSL: out-of-bounds read in X509_cmp_time OpenSSL: PKCS7 crash with missing EnvelopedContent OpenSSL: Race condition handling NewSessionTicket OpenSSL: CMS verify infinite loop with unknown hash function openssl: Crash in ssleay_rand_bytes due to locking regression
cpes: cpe:/o:redhat:enterprise_linux:6::client cpe:/o:redhat:enterprise_linux:6::computenode cpe:/o:redhat:enterprise_linux:6::server cpe:/o:redhat:enterprise_linux:6::workstation cpe:/o:redhat:enterprise_linux:7::client cpe:/o:redhat:enterprise_linux:7::computenode cpe:/o:redhat:enterprise_linux:7::server cpe:/o:redhat:enterprise_linux:7::workstation