Resolution for CVE-2016-6309 and CVE-2016-7052 (OpenSSL September 26, 2016)

Issue

• On 26 September 2016, the OpenSSL project team announced the release of OpenSSL versions 1.1.0b, 1.0.2j. These new versions of the OpenSSL toolkit fix several security issues, which have been rated by the Red Hat Product Security team as having a Moderate/Important/Low impact.
  What Red Hat products and distributed versions of OpenSSL are affected?
• openssl: Use After Free for large message sizes (CVE-2016-6309)
• openssl: Missing CRL sanity check (CVE-2016-7052)