ELSA-2012-0426

ELSA-2012-0426 - openssl security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2012-03-27

Description

[1.0.0-20.3]
- fix problem with the SGC restart patch that might terminate handshake
incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)

Related CVEs

CVE-2012-0884

CVE-2012-1165

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	openssl-0.9.8e-22.el5_8.1.src.rpm	7ba7ef202f881a44f890a5bfb420273d	ELEA-2017-1391
	openssl-0.9.8e-22.el5_8.1.i386.rpm	18abb1dcd527d6cbc254bf6fd4fe343f	ELEA-2017-1391
	openssl-0.9.8e-22.el5_8.1.i686.rpm	2087a501e532d4a55317f7491ac3dc8b	ELEA-2017-1391
	openssl-devel-0.9.8e-22.el5_8.1.i386.rpm	b5b065c193a1897eab163705292b4d70	ELEA-2017-1391
	openssl-perl-0.9.8e-22.el5_8.1.i386.rpm	79b90222c0995d57f8f530988f46cd49	ELEA-2017-1391
Oracle Linux 5 (ia64)	openssl-0.9.8e-22.el5_8.1.src.rpm	7ba7ef202f881a44f890a5bfb420273d	ELEA-2017-1391
	openssl-0.9.8e-22.el5_8.1.i686.rpm	2087a501e532d4a55317f7491ac3dc8b	ELEA-2017-1391
	openssl-0.9.8e-22.el5_8.1.ia64.rpm	653822ace652e6d9f41440200fbc2c72	ELEA-2017-1391
	openssl-devel-0.9.8e-22.el5_8.1.ia64.rpm	d4c8e3c18fc5470b97ca2951ae17ccba	ELEA-2017-1391
	openssl-perl-0.9.8e-22.el5_8.1.ia64.rpm	ea6e0facac8ff4b05920bcd62497c506	ELEA-2017-1391
Oracle Linux 5 (x86_64)	openssl-0.9.8e-22.el5_8.1.src.rpm	7ba7ef202f881a44f890a5bfb420273d	ELEA-2017-1391
	openssl-0.9.8e-22.el5_8.1.i686.rpm	2087a501e532d4a55317f7491ac3dc8b	ELEA-2017-1391
	openssl-0.9.8e-22.el5_8.1.x86_64.rpm	19765a86b818c8a5dc512e008781f947	ELEA-2017-1391
	openssl-devel-0.9.8e-22.el5_8.1.i386.rpm	b5b065c193a1897eab163705292b4d70	ELEA-2017-1391
	openssl-devel-0.9.8e-22.el5_8.1.x86_64.rpm	07d17fcde17c05b6c857328efc73e656	ELEA-2017-1391
	openssl-perl-0.9.8e-22.el5_8.1.x86_64.rpm	fd69ef11990f764a166e27af9b5abbac	ELEA-2017-1391
Oracle Linux 6 (i386)	openssl-1.0.0-20.el6_2.3.src.rpm	c3837a6be827a3499df39a54e362efa2	ELSA-2021-9150
	openssl-1.0.0-20.el6_2.3.i686.rpm	1f1deccef1b61e989885a49dac1adc02	ELSA-2021-9150
	openssl-devel-1.0.0-20.el6_2.3.i686.rpm	2b20249c99348b7f3a9a67389d7b6362	ELSA-2021-9150
	openssl-perl-1.0.0-20.el6_2.3.i686.rpm	0b4b527aeccb879ce0ef9d80fc2a9dd5	ELSA-2021-9150
	openssl-static-1.0.0-20.el6_2.3.i686.rpm	f09e351cd5fc1e7df5237dcc6b75f51c	ELSA-2021-9150
Oracle Linux 6 (x86_64)	openssl-1.0.0-20.el6_2.3.src.rpm	c3837a6be827a3499df39a54e362efa2	ELSA-2021-9150
	openssl-1.0.0-20.el6_2.3.i686.rpm	1f1deccef1b61e989885a49dac1adc02	ELSA-2021-9150
	openssl-1.0.0-20.el6_2.3.x86_64.rpm	0dc63322718da7688b009939553c46dd	ELSA-2021-9150
	openssl-devel-1.0.0-20.el6_2.3.i686.rpm	2b20249c99348b7f3a9a67389d7b6362	ELSA-2021-9150
	openssl-devel-1.0.0-20.el6_2.3.x86_64.rpm	f9f064660c499612e77fde1ffdd1bafd	ELSA-2021-9150
	openssl-perl-1.0.0-20.el6_2.3.x86_64.rpm	25733e5180d0c7b250d0815db4bce928	ELSA-2021-9150
	openssl-static-1.0.0-20.el6_2.3.x86_64.rpm	71dd4d98dfe1616e7b668f9d9efdad4c	ELSA-2021-9150

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team