ELSA-2014-1052

ELSA-2014-1052 - openssl security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2014-08-13

Description

[1.0.1e-34.4]
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3507 - avoid memory leak in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3509 - fix race condition when parsing server hello
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
- fix CVE-2014-3511 - disallow protocol downgrade via fragmentation

Related CVEs

CVE-2014-3511

CVE-2014-3505

CVE-2014-3506

CVE-2014-3508

CVE-2014-3509

CVE-2014-3507

CVE-2014-3510

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	openssl-1.0.1e-16.el6_5.15.src.rpm	67c627ae49a4074c7c7eb0643126f546f66bce5a871a1f1806818725b920f239	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-1.0.1e-16.el6_5.15.src.rpm	67c627ae49a4074c7c7eb0643126f546f66bce5a871a1f1806818725b920f239	ELSA-2023-12326	ol6_u5_i386_patch
	openssl-1.0.1e-16.el6_5.15.i686.rpm	232919d38c5514f6fb2beb573ff45d25a000f078a10cade5bb80fcfb030fe536	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-1.0.1e-16.el6_5.15.i686.rpm	232919d38c5514f6fb2beb573ff45d25a000f078a10cade5bb80fcfb030fe536	ELSA-2023-12326	ol6_u5_i386_patch
	openssl-devel-1.0.1e-16.el6_5.15.i686.rpm	fafeda45b49c74684dca06c2f6501120bbb414f75d7efb247cb2dd4c1df459d9	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-devel-1.0.1e-16.el6_5.15.i686.rpm	fafeda45b49c74684dca06c2f6501120bbb414f75d7efb247cb2dd4c1df459d9	ELSA-2023-12326	ol6_u5_i386_patch
	openssl-perl-1.0.1e-16.el6_5.15.i686.rpm	2a9f9cceba13292c0510b33894a413bd805e82c71211533fe1a3b212d15159e4	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-perl-1.0.1e-16.el6_5.15.i686.rpm	2a9f9cceba13292c0510b33894a413bd805e82c71211533fe1a3b212d15159e4	ELSA-2023-12326	ol6_u5_i386_patch
	openssl-static-1.0.1e-16.el6_5.15.i686.rpm	e79e25a084e583446f2fb41557a44daf47d6320f813532137a01b57606c76966	ELSA-2023-12326	ol6_i386_latest_archive
	openssl-static-1.0.1e-16.el6_5.15.i686.rpm	e79e25a084e583446f2fb41557a44daf47d6320f813532137a01b57606c76966	ELSA-2023-12326	ol6_u5_i386_patch
Oracle Linux 6 (x86_64)	openssl-1.0.1e-16.el6_5.15.src.rpm	67c627ae49a4074c7c7eb0643126f546f66bce5a871a1f1806818725b920f239	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-1.0.1e-16.el6_5.15.src.rpm	67c627ae49a4074c7c7eb0643126f546f66bce5a871a1f1806818725b920f239	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-1.0.1e-16.el6_5.15.i686.rpm	232919d38c5514f6fb2beb573ff45d25a000f078a10cade5bb80fcfb030fe536	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-1.0.1e-16.el6_5.15.i686.rpm	232919d38c5514f6fb2beb573ff45d25a000f078a10cade5bb80fcfb030fe536	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-1.0.1e-16.el6_5.15.x86_64.rpm	e4d10811679d57528f384873450e30c1854461faf87516831750f99654eb48de	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-1.0.1e-16.el6_5.15.x86_64.rpm	e4d10811679d57528f384873450e30c1854461faf87516831750f99654eb48de	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-devel-1.0.1e-16.el6_5.15.i686.rpm	fafeda45b49c74684dca06c2f6501120bbb414f75d7efb247cb2dd4c1df459d9	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-devel-1.0.1e-16.el6_5.15.i686.rpm	fafeda45b49c74684dca06c2f6501120bbb414f75d7efb247cb2dd4c1df459d9	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-devel-1.0.1e-16.el6_5.15.x86_64.rpm	088d767af3fe666610c5da10182b5111354fcd54214bf6e700fe497441905c92	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-devel-1.0.1e-16.el6_5.15.x86_64.rpm	088d767af3fe666610c5da10182b5111354fcd54214bf6e700fe497441905c92	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-perl-1.0.1e-16.el6_5.15.x86_64.rpm	0244068206e6caa8ff04534031cc0fbbc5a92f9f4c7c57b27c5763653745e189	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-perl-1.0.1e-16.el6_5.15.x86_64.rpm	0244068206e6caa8ff04534031cc0fbbc5a92f9f4c7c57b27c5763653745e189	ELSA-2023-12326	ol6_x86_64_latest_archive
	openssl-static-1.0.1e-16.el6_5.15.x86_64.rpm	a3da6ab96409485b73d174dd42cb666a306b8a57d74dfb7aa1bb492871629071	ELSA-2023-12326	ol6_u5_x86_64_patch
	openssl-static-1.0.1e-16.el6_5.15.x86_64.rpm	a3da6ab96409485b73d174dd42cb666a306b8a57d74dfb7aa1bb492871629071	ELSA-2023-12326	ol6_x86_64_latest_archive
Oracle Linux 7 (x86_64)	openssl-1.0.1e-34.el7_0.4.src.rpm	7c2b1ba0b225d6524642520f9c3642b1f598c522cbd57492977cc2d57cdbc490	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-1.0.1e-34.el7_0.4.src.rpm	7c2b1ba0b225d6524642520f9c3642b1f598c522cbd57492977cc2d57cdbc490	ELSA-2017-3518	ol7_x86_64_optional_archive
	openssl-1.0.1e-34.el7_0.4.src.rpm	7c2b1ba0b225d6524642520f9c3642b1f598c522cbd57492977cc2d57cdbc490	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-1.0.1e-34.el7_0.4.x86_64.rpm	7ceb0e7eea6cb1d87ecf8722f1ee9d6757a97006a1f8299463b478ca4234ccfb	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-1.0.1e-34.el7_0.4.x86_64.rpm	7ceb0e7eea6cb1d87ecf8722f1ee9d6757a97006a1f8299463b478ca4234ccfb	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-devel-1.0.1e-34.el7_0.4.i686.rpm	91cfe38c3acaadb7f2a178475ca10fb6263a7931fbb97031296148bb542f1f5f	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-devel-1.0.1e-34.el7_0.4.i686.rpm	91cfe38c3acaadb7f2a178475ca10fb6263a7931fbb97031296148bb542f1f5f	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-devel-1.0.1e-34.el7_0.4.x86_64.rpm	de99f3784ca3afd9a7b87044a1ded12ba0c3b550a65476741ba50755f4556c88	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-devel-1.0.1e-34.el7_0.4.x86_64.rpm	de99f3784ca3afd9a7b87044a1ded12ba0c3b550a65476741ba50755f4556c88	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-libs-1.0.1e-34.el7_0.4.i686.rpm	18bc9f3ac662086487a9e57e566d1df955711b5d944ca2e3d13048a07030a553	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-libs-1.0.1e-34.el7_0.4.i686.rpm	18bc9f3ac662086487a9e57e566d1df955711b5d944ca2e3d13048a07030a553	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-libs-1.0.1e-34.el7_0.4.x86_64.rpm	fa2b470a5ea2f778ee187af9aa34b8436b8e3d0f7f9f4f5e6b376233ab745070	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-libs-1.0.1e-34.el7_0.4.x86_64.rpm	fa2b470a5ea2f778ee187af9aa34b8436b8e3d0f7f9f4f5e6b376233ab745070	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-perl-1.0.1e-34.el7_0.4.x86_64.rpm	13957827885666d17f7ac63d557d4f4cd0a7d5ab4d6098c7e2db371f1d34c7ce	ELSA-2017-3518	ol7_x86_64_optional_archive
	openssl-static-1.0.1e-34.el7_0.4.i686.rpm	9c4f3d4bdb1fe0927daac3c5c717e0b5bfc78a3aa4ca3b275572be16d32a6bd6	ELSA-2017-3518	ol7_x86_64_optional_archive
	openssl-static-1.0.1e-34.el7_0.4.x86_64.rpm	ef0f24aaf00aed917741cfe70b2ea299cec6fdbe7ba306ef37036244cc20249c	ELSA-2017-3518	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team