ELEA-2015-0958

ELEA-2015-0958 - openssl enhancement update

Type:	ENHANCEMENT
Impact:	NA
Release Date:	2015-05-12

Description

[0.9.8e-34.0.1]
- Backport openssl 08-Jan-2015 security fixes (John Haxby) [orabug 20409893]
- fix CVE-2014-3570 - Bignum squaring may produce incorrect results
- fix CVE-2014-3571 - DTLS segmentation fault in dtls1_get_record
- fix CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client]

[0.9.8e-34]
- Rebase ca-bundle.crt to the upstream version 2.4 with legacy
modifications. For compatibility reasons, several CA certificates with
RSA sizes of 1024 bits are still included.
- Add a patch to the source RPM that documents the changes from the
upstream version.

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	openssl-0.9.8e-34.0.1.el5_11.src.rpm	6bd0dc14a40de853e5e603f7d3fc11bce60f8f211ee03741722ff3e45554249d	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-34.0.1.el5_11.src.rpm	6bd0dc14a40de853e5e603f7d3fc11bce60f8f211ee03741722ff3e45554249d	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-0.9.8e-34.0.1.el5_11.i386.rpm	dae0d907c1e6c1bd104e55abd254a488cdfdd515a10e54c9952f3d30a1fed657	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-34.0.1.el5_11.i386.rpm	dae0d907c1e6c1bd104e55abd254a488cdfdd515a10e54c9952f3d30a1fed657	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-0.9.8e-34.0.1.el5_11.i686.rpm	30c7c881145689debd7a3eff668516798bf662f5c9a91def8cca4fcf7d248878	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-34.0.1.el5_11.i686.rpm	30c7c881145689debd7a3eff668516798bf662f5c9a91def8cca4fcf7d248878	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-devel-0.9.8e-34.0.1.el5_11.i386.rpm	40f8fab60ac18104fd4bc6db88d3a0659a093cbc14f4458c7dbb9862364ba6c8	ELEA-2017-1391	ol5_i386_latest
	openssl-devel-0.9.8e-34.0.1.el5_11.i386.rpm	40f8fab60ac18104fd4bc6db88d3a0659a093cbc14f4458c7dbb9862364ba6c8	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-perl-0.9.8e-34.0.1.el5_11.i386.rpm	637c5b4380eebb6481fd94e99f2a3124ec886eb04d022fa7089ff96863765555	ELEA-2017-1391	ol5_i386_latest
	openssl-perl-0.9.8e-34.0.1.el5_11.i386.rpm	637c5b4380eebb6481fd94e99f2a3124ec886eb04d022fa7089ff96863765555	ELEA-2017-1391	ol5_u11_i386_patch
Oracle Linux 5 (ia64)	openssl-0.9.8e-34.0.1.el5_11.src.rpm	6bd0dc14a40de853e5e603f7d3fc11bce60f8f211ee03741722ff3e45554249d	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-34.0.1.el5_11.src.rpm	6bd0dc14a40de853e5e603f7d3fc11bce60f8f211ee03741722ff3e45554249d	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-0.9.8e-34.0.1.el5_11.i686.rpm	30c7c881145689debd7a3eff668516798bf662f5c9a91def8cca4fcf7d248878	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-34.0.1.el5_11.i686.rpm	30c7c881145689debd7a3eff668516798bf662f5c9a91def8cca4fcf7d248878	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-0.9.8e-34.0.1.el5_11.ia64.rpm	1a98dac06d6cf6876c56d1635315c134b498bf1895d65c2828a9423aeb5b8937	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-34.0.1.el5_11.ia64.rpm	1a98dac06d6cf6876c56d1635315c134b498bf1895d65c2828a9423aeb5b8937	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-devel-0.9.8e-34.0.1.el5_11.ia64.rpm	e6b6312f6996e2e7d65fee2ed4403564bdefe7a61ee32652d79df131821151d4	ELEA-2017-1391	ol5_ia64_latest
	openssl-devel-0.9.8e-34.0.1.el5_11.ia64.rpm	e6b6312f6996e2e7d65fee2ed4403564bdefe7a61ee32652d79df131821151d4	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-perl-0.9.8e-34.0.1.el5_11.ia64.rpm	9752a8369ccc40d7156e6cb65272659c81057efbb5ea9a4e0656d6a9b0a5d031	ELEA-2017-1391	ol5_ia64_latest
	openssl-perl-0.9.8e-34.0.1.el5_11.ia64.rpm	9752a8369ccc40d7156e6cb65272659c81057efbb5ea9a4e0656d6a9b0a5d031	ELEA-2017-1391	ol5_u11_ia64_patch
Oracle Linux 5 (x86_64)	openssl-0.9.8e-34.0.1.el5_11.src.rpm	6bd0dc14a40de853e5e603f7d3fc11bce60f8f211ee03741722ff3e45554249d	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-34.0.1.el5_11.src.rpm	6bd0dc14a40de853e5e603f7d3fc11bce60f8f211ee03741722ff3e45554249d	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-34.0.1.el5_11.i686.rpm	30c7c881145689debd7a3eff668516798bf662f5c9a91def8cca4fcf7d248878	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-34.0.1.el5_11.i686.rpm	30c7c881145689debd7a3eff668516798bf662f5c9a91def8cca4fcf7d248878	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-34.0.1.el5_11.x86_64.rpm	d03ad0e8933ec68a299816f768c8ca50ccdf7b7a9e1558c4be8594f4ba959fec	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-34.0.1.el5_11.x86_64.rpm	d03ad0e8933ec68a299816f768c8ca50ccdf7b7a9e1558c4be8594f4ba959fec	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-34.0.1.el5_11.i386.rpm	40f8fab60ac18104fd4bc6db88d3a0659a093cbc14f4458c7dbb9862364ba6c8	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-devel-0.9.8e-34.0.1.el5_11.i386.rpm	40f8fab60ac18104fd4bc6db88d3a0659a093cbc14f4458c7dbb9862364ba6c8	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-34.0.1.el5_11.x86_64.rpm	f8ed3d616bdd9ea91eae5062c8c9454e0be6b8fa9fdcabd5150bada486467d34	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-devel-0.9.8e-34.0.1.el5_11.x86_64.rpm	f8ed3d616bdd9ea91eae5062c8c9454e0be6b8fa9fdcabd5150bada486467d34	ELEA-2017-1391	ol5_x86_64_latest
	openssl-perl-0.9.8e-34.0.1.el5_11.x86_64.rpm	1f85e7fd7caff421f2de6cf7438bafe670cd7db5c7a8fc3df1532e8f59796ca9	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-perl-0.9.8e-34.0.1.el5_11.x86_64.rpm	1f85e7fd7caff421f2de6cf7438bafe670cd7db5c7a8fc3df1532e8f59796ca9	ELEA-2017-1391	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team