[ GLSA 201506-02 ] OpenSSL

[GLSA]

Gentoo Linux Security Advisory

Title: OpenSSL: Multiple vulnerabilities (GLSA 201506-02)
Severity: normal
Exploitable: remote
Date: June 22, 2015
Bug(s): #551832
ID: 201506-02

Synopsis

Multiple vulnerabilities have been found in OpenSSL that can result
in either Denial of Service or information disclosure.


Background

OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer
and Transport Layer Security as well as a general purpose cryptography
library.


Affected Packages

Package: dev-libs/openssl
Vulnerable: < 1.0.1o
Unaffected: >= 1.0.1o
Unaffected: >= 0.9.8z_p7
Architectures: All supported architectures


Description

Multiple vulnerabilities have been found in OpenSSL. Please review the
CVE identifiers referenced below for details.


Impact

A remote attacker can cause Denial of Service and information
disclosure.


Workaround

There is no known workaround at this time.

Resolution

All OpenSSL 1.0.1 users should upgrade to the latest version: