Protect yourself from drown attack by updating your openssl package.
Redhat patched openssl 1.0.1e
# rpm -q --changelog openssl-1.0.1e-51.el7_2.4.x86_64 | head * Wed Feb 24 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-51.4 - fix CVE-2016-0702 - side channel attack on modular exponentiation - fix CVE-2016-0705 - double-free in DSA private key parsing - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn * Tue Feb 16 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-51.3 - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement - disable SSLv2 in the generic TLS method
goto https://drownattack.com/ for more info