MNBSD-2015-4: OpenSSL security update to 0.9.8zg (multiple vulnerabilities)

Description

OpenSSL was updated to version 0.9.8zg to address multiple vulnerabilities, including the Logjam DH downgrade weakness and several denial-of-service and memory issues. Impacts range from denial of service to man-in-the-middle downgrade of TLS connections.

Affected Versions

openssl

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-15:10.openssl.asc
• https://www.cve.org/CVERecord?id=CVE-2015-1788
• https://www.cve.org/CVERecord?id=CVE-2015-1789
• https://www.cve.org/CVERecord?id=CVE-2015-1790
• https://www.cve.org/CVERecord?id=CVE-2015-1791
• https://www.cve.org/CVERecord?id=CVE-2015-1792
• https://www.cve.org/CVERecord?id=CVE-2015-4000
• https://www.cve.org/CVERecord?id=CVE-2014-8176

Additional Information

Aliases: CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2015-4000, CVE-2014-8176

Published: June 12, 2015
Last Modified: June 12, 2015