ELSA-2007-0964

ELSA-2007-0964 - Important: openssl security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2007-10-12

Description

[0.9.8b-8.3.2]
- more DTLS fixes (#321211)

[0.9.8b-8.3.1]
- fix CVE-2007-3108 - side channel attack on private keys (#322891)
- fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309871)
- fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321211)

Related CVEs

CVE-2007-3108

CVE-2007-4995

CVE-2007-5135

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	openssl-0.9.8b-8.3.el5_0.2.src.rpm	2d1617c3e8ec241f0b477cb675b93fec	ELEA-2017-1391
	openssl-0.9.8b-8.3.el5_0.2.src.rpm	913c262a2a030da66762f63d854ff5ae	ELEA-2017-1391
	openssl-0.9.8b-8.3.el5_0.2.i386.rpm	6b6d6ece2c3f5ef8fa637e0aeb5a53d9	ELEA-2017-1391
	openssl-0.9.8b-8.3.el5_0.2.i686.rpm	5f36ad046f053552f3da32428b0a0c7b	ELEA-2017-1391
	openssl-devel-0.9.8b-8.3.el5_0.2.i386.rpm	5adf222f7a9c8e380907080daaeed555	ELEA-2017-1391
	openssl-perl-0.9.8b-8.3.el5_0.2.i386.rpm	2eeea3288f528f70475730380852f01a	ELEA-2017-1391
Oracle Linux 5 (x86_64)	openssl-0.9.8b-8.3.el5_0.2.src.rpm	2d1617c3e8ec241f0b477cb675b93fec	ELEA-2017-1391
	openssl-0.9.8b-8.3.el5_0.2.src.rpm	913c262a2a030da66762f63d854ff5ae	ELEA-2017-1391
	openssl-0.9.8b-8.3.el5_0.2.i686.rpm	5f36ad046f053552f3da32428b0a0c7b	ELEA-2017-1391
	openssl-0.9.8b-8.3.el5_0.2.x86_64.rpm	350ed2851fd73d00b9dd4840fa73ac6a	ELEA-2017-1391
	openssl-devel-0.9.8b-8.3.el5_0.2.i386.rpm	5adf222f7a9c8e380907080daaeed555	ELEA-2017-1391
	openssl-devel-0.9.8b-8.3.el5_0.2.x86_64.rpm	3f2fb350e51258c93e824fd7fadeffbb	ELEA-2017-1391
	openssl-perl-0.9.8b-8.3.el5_0.2.x86_64.rpm	0e2a427587530d6d22dac45886738e1a	ELEA-2017-1391

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team