ELSA-2014-0015

ELSA-2014-0015 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2014-01-08

Description

[1.0.1e-16.4]
- fix CVE-2013-4353 - Invalid TLS handshake crash

[1.0.1e-16.3]
- fix CVE-2013-6450 - possible MiTM attack on DTLS1

[1.0.1e-16.2]
- fix CVE-2013-6449 - crash when version in SSL structure is incorrect

Related CVEs

CVE-2013-6449

CVE-2013-6450

CVE-2013-4353

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	openssl-1.0.1e-16.el6_5.4.src.rpm	23d2d30f91760ccca36ae59f50b5472d84f38e1b12206cc238d4ff7016f55679	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-1.0.1e-16.el6_5.4.src.rpm	23d2d30f91760ccca36ae59f50b5472d84f38e1b12206cc238d4ff7016f55679	ELSA-2023-12326	ol6_u5_i386_patch
	openssl-1.0.1e-16.el6_5.4.i686.rpm	612da245dee8072259f66874641587257561e61e89e97b607ed4ea83c612898f	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-1.0.1e-16.el6_5.4.i686.rpm	612da245dee8072259f66874641587257561e61e89e97b607ed4ea83c612898f	ELSA-2023-12326	ol6_u5_i386_patch
	openssl-devel-1.0.1e-16.el6_5.4.i686.rpm	ee266e712409090441f57c48ae4f0ca68bca4bca7ed493691fab2b87a76e2308	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-devel-1.0.1e-16.el6_5.4.i686.rpm	ee266e712409090441f57c48ae4f0ca68bca4bca7ed493691fab2b87a76e2308	ELSA-2023-12326	ol6_u5_i386_patch
	openssl-perl-1.0.1e-16.el6_5.4.i686.rpm	45e6c6eae20431296047b67b71934a14c9e376c3513139b2b5369363154e70f5	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-perl-1.0.1e-16.el6_5.4.i686.rpm	45e6c6eae20431296047b67b71934a14c9e376c3513139b2b5369363154e70f5	ELSA-2023-12326	ol6_u5_i386_patch
	openssl-static-1.0.1e-16.el6_5.4.i686.rpm	e8c2e22d9177672efa6ad86ae1086b4c7b7ed2f1c3cde4cf8c82030083ca9807	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-static-1.0.1e-16.el6_5.4.i686.rpm	e8c2e22d9177672efa6ad86ae1086b4c7b7ed2f1c3cde4cf8c82030083ca9807	ELSA-2023-12326	ol6_u5_i386_patch
Oracle Linux 6 (x86_64)	openssl-1.0.1e-16.el6_5.4.src.rpm	23d2d30f91760ccca36ae59f50b5472d84f38e1b12206cc238d4ff7016f55679	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-1.0.1e-16.el6_5.4.src.rpm	23d2d30f91760ccca36ae59f50b5472d84f38e1b12206cc238d4ff7016f55679	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-1.0.1e-16.el6_5.4.i686.rpm	612da245dee8072259f66874641587257561e61e89e97b607ed4ea83c612898f	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-1.0.1e-16.el6_5.4.i686.rpm	612da245dee8072259f66874641587257561e61e89e97b607ed4ea83c612898f	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-1.0.1e-16.el6_5.4.x86_64.rpm	bee7f139baca322c0f7d50f634be16949d9f5e2010a942c4d03144974a0172fb	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-1.0.1e-16.el6_5.4.x86_64.rpm	bee7f139baca322c0f7d50f634be16949d9f5e2010a942c4d03144974a0172fb	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-devel-1.0.1e-16.el6_5.4.i686.rpm	ee266e712409090441f57c48ae4f0ca68bca4bca7ed493691fab2b87a76e2308	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-devel-1.0.1e-16.el6_5.4.i686.rpm	ee266e712409090441f57c48ae4f0ca68bca4bca7ed493691fab2b87a76e2308	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-devel-1.0.1e-16.el6_5.4.x86_64.rpm	452bb249a3a58dde94803479193c44565f5aaa9484baaf7ee352d8db9f7dd1f3	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-devel-1.0.1e-16.el6_5.4.x86_64.rpm	452bb249a3a58dde94803479193c44565f5aaa9484baaf7ee352d8db9f7dd1f3	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-perl-1.0.1e-16.el6_5.4.x86_64.rpm	31d449a5114f5a7f7a915ad363640c6da89a9df42d21d14f082b4c422e1ad187	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-perl-1.0.1e-16.el6_5.4.x86_64.rpm	31d449a5114f5a7f7a915ad363640c6da89a9df42d21d14f082b4c422e1ad187	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-static-1.0.1e-16.el6_5.4.x86_64.rpm	4c01405cd9545d7c95e5b81b502ee876bad07fe2c009d8d650850c473697d380	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-static-1.0.1e-16.el6_5.4.x86_64.rpm	4c01405cd9545d7c95e5b81b502ee876bad07fe2c009d8d650850c473697d380	ELSA-2023-12326	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team