Unsure which patch(es) to apply for DROWN
I'm a RHEL newbie.
We have some RHEL 6.7 servers.
I ran the DROWN-test.sh script and received the following result:
WARNING: The installed version of openssl (openssl-1.0.1e-42.el6.x86_64) is vulnerable to the general DROWN attack and should be upgraded.
See https://access.redhat.com/security/vulnerabilities/drown for more information.
Which DROWN patch or patches do I run to fix the vulnerability?
I'm unclear on which one I should use.
Thanks in advance.
Responses