ELSA-2014-1053

ELSA-2014-1053 - openssl security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2014-08-13

Description

[0.9.8e-27.4]
- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS

[0.9.8e-27.3]
- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability

[0.9.8e-27.1]
- replace expired GlobalSign Root CA certificate in ca-bundle.crt

Related CVEs

CVE-2014-3505

CVE-2014-3510

CVE-2014-0221

CVE-2014-3506

CVE-2014-3508

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	openssl-0.9.8e-27.el5_10.4.src.rpm	9849f9bfff6b03a27f59e866a6d7bf6e5bb8685bf158e6f3bf77457667111df5	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-27.el5_10.4.src.rpm	9849f9bfff6b03a27f59e866a6d7bf6e5bb8685bf158e6f3bf77457667111df5	ELEA-2017-1391	ol5_u10_i386_patch
	openssl-0.9.8e-27.el5_10.4.src.rpm	9849f9bfff6b03a27f59e866a6d7bf6e5bb8685bf158e6f3bf77457667111df5	ELEA-2017-1391	ol5_u11_i386_base
	openssl-0.9.8e-27.el5_10.4.i386.rpm	ab59a0ed4a7e75691ef9c983e08e200244de1d6a34a8bf1f43af4e3c904bd69f	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-27.el5_10.4.i386.rpm	ab59a0ed4a7e75691ef9c983e08e200244de1d6a34a8bf1f43af4e3c904bd69f	ELEA-2017-1391	ol5_u10_i386_patch
	openssl-0.9.8e-27.el5_10.4.i386.rpm	ab59a0ed4a7e75691ef9c983e08e200244de1d6a34a8bf1f43af4e3c904bd69f	ELEA-2017-1391	ol5_u11_i386_base
	openssl-0.9.8e-27.el5_10.4.i686.rpm	2a80683629493d3323326f9d1bfdf7abc076280f91812fdb70eadbc075be15fd	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-27.el5_10.4.i686.rpm	2a80683629493d3323326f9d1bfdf7abc076280f91812fdb70eadbc075be15fd	ELEA-2017-1391	ol5_u10_i386_patch
	openssl-0.9.8e-27.el5_10.4.i686.rpm	2a80683629493d3323326f9d1bfdf7abc076280f91812fdb70eadbc075be15fd	ELEA-2017-1391	ol5_u11_i386_base
	openssl-devel-0.9.8e-27.el5_10.4.i386.rpm	6231990287ff0912b66c57696d2ed00c5c97c4a85390af1db7be0e5255a02d72	ELEA-2017-1391	ol5_i386_latest
	openssl-devel-0.9.8e-27.el5_10.4.i386.rpm	6231990287ff0912b66c57696d2ed00c5c97c4a85390af1db7be0e5255a02d72	ELEA-2017-1391	ol5_u10_i386_patch
	openssl-devel-0.9.8e-27.el5_10.4.i386.rpm	6231990287ff0912b66c57696d2ed00c5c97c4a85390af1db7be0e5255a02d72	ELEA-2017-1391	ol5_u11_i386_base
	openssl-perl-0.9.8e-27.el5_10.4.i386.rpm	d073aeeeff42b6bc03088c38b3b3280800c940a32e37f8a153ad874bfd9979b5	ELEA-2017-1391	ol5_i386_latest
	openssl-perl-0.9.8e-27.el5_10.4.i386.rpm	d073aeeeff42b6bc03088c38b3b3280800c940a32e37f8a153ad874bfd9979b5	ELEA-2017-1391	ol5_u10_i386_patch
	openssl-perl-0.9.8e-27.el5_10.4.i386.rpm	d073aeeeff42b6bc03088c38b3b3280800c940a32e37f8a153ad874bfd9979b5	ELEA-2017-1391	ol5_u11_i386_base
Oracle Linux 5 (ia64)	openssl-0.9.8e-27.el5_10.4.src.rpm	9849f9bfff6b03a27f59e866a6d7bf6e5bb8685bf158e6f3bf77457667111df5	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-27.el5_10.4.src.rpm	9849f9bfff6b03a27f59e866a6d7bf6e5bb8685bf158e6f3bf77457667111df5	ELEA-2017-1391	ol5_u10_ia64_patch
	openssl-0.9.8e-27.el5_10.4.src.rpm	9849f9bfff6b03a27f59e866a6d7bf6e5bb8685bf158e6f3bf77457667111df5	ELEA-2017-1391	ol5_u11_ia64_base
	openssl-0.9.8e-27.el5_10.4.i686.rpm	2a80683629493d3323326f9d1bfdf7abc076280f91812fdb70eadbc075be15fd	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-27.el5_10.4.i686.rpm	2a80683629493d3323326f9d1bfdf7abc076280f91812fdb70eadbc075be15fd	ELEA-2017-1391	ol5_u10_ia64_patch
	openssl-0.9.8e-27.el5_10.4.i686.rpm	2a80683629493d3323326f9d1bfdf7abc076280f91812fdb70eadbc075be15fd	ELEA-2017-1391	ol5_u11_ia64_base
	openssl-0.9.8e-27.el5_10.4.ia64.rpm	2c4245621525d81cfce9bb22f92e43488df71e390232c29fb06e53542d9cd775	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-27.el5_10.4.ia64.rpm	2c4245621525d81cfce9bb22f92e43488df71e390232c29fb06e53542d9cd775	ELEA-2017-1391	ol5_u10_ia64_patch
	openssl-0.9.8e-27.el5_10.4.ia64.rpm	2c4245621525d81cfce9bb22f92e43488df71e390232c29fb06e53542d9cd775	ELEA-2017-1391	ol5_u11_ia64_base
	openssl-devel-0.9.8e-27.el5_10.4.ia64.rpm	c5802ea0c76da65803e23e23edcc22608c53be8de253b2847b85466f1bfef8ad	ELEA-2017-1391	ol5_ia64_latest
	openssl-devel-0.9.8e-27.el5_10.4.ia64.rpm	c5802ea0c76da65803e23e23edcc22608c53be8de253b2847b85466f1bfef8ad	ELEA-2017-1391	ol5_u10_ia64_patch
	openssl-devel-0.9.8e-27.el5_10.4.ia64.rpm	c5802ea0c76da65803e23e23edcc22608c53be8de253b2847b85466f1bfef8ad	ELEA-2017-1391	ol5_u11_ia64_base
	openssl-perl-0.9.8e-27.el5_10.4.ia64.rpm	89a3d6c9a04dcb5cf5ce56e3ec728dd38b015164e703caa8935f341b6c4cbcb5	ELEA-2017-1391	ol5_ia64_latest
	openssl-perl-0.9.8e-27.el5_10.4.ia64.rpm	89a3d6c9a04dcb5cf5ce56e3ec728dd38b015164e703caa8935f341b6c4cbcb5	ELEA-2017-1391	ol5_u10_ia64_patch
	openssl-perl-0.9.8e-27.el5_10.4.ia64.rpm	89a3d6c9a04dcb5cf5ce56e3ec728dd38b015164e703caa8935f341b6c4cbcb5	ELEA-2017-1391	ol5_u11_ia64_base
Oracle Linux 5 (x86_64)	openssl-0.9.8e-27.el5_10.4.src.rpm	9849f9bfff6b03a27f59e866a6d7bf6e5bb8685bf158e6f3bf77457667111df5	ELEA-2017-1391	ol5_u10_x86_64_patch
	openssl-0.9.8e-27.el5_10.4.src.rpm	9849f9bfff6b03a27f59e866a6d7bf6e5bb8685bf158e6f3bf77457667111df5	ELEA-2017-1391	ol5_u11_x86_64_base
	openssl-0.9.8e-27.el5_10.4.src.rpm	9849f9bfff6b03a27f59e866a6d7bf6e5bb8685bf158e6f3bf77457667111df5	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-27.el5_10.4.i686.rpm	2a80683629493d3323326f9d1bfdf7abc076280f91812fdb70eadbc075be15fd	ELEA-2017-1391	ol5_u10_x86_64_patch
	openssl-0.9.8e-27.el5_10.4.i686.rpm	2a80683629493d3323326f9d1bfdf7abc076280f91812fdb70eadbc075be15fd	ELEA-2017-1391	ol5_u11_x86_64_base
	openssl-0.9.8e-27.el5_10.4.i686.rpm	2a80683629493d3323326f9d1bfdf7abc076280f91812fdb70eadbc075be15fd	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-27.el5_10.4.x86_64.rpm	d997a76c1f96c9518c80d726e60f08a592a847aecd3e97ac7c5dbb594418081c	ELEA-2017-1391	ol5_u10_x86_64_patch
	openssl-0.9.8e-27.el5_10.4.x86_64.rpm	d997a76c1f96c9518c80d726e60f08a592a847aecd3e97ac7c5dbb594418081c	ELEA-2017-1391	ol5_u11_x86_64_base
	openssl-0.9.8e-27.el5_10.4.x86_64.rpm	d997a76c1f96c9518c80d726e60f08a592a847aecd3e97ac7c5dbb594418081c	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-27.el5_10.4.i386.rpm	6231990287ff0912b66c57696d2ed00c5c97c4a85390af1db7be0e5255a02d72	ELEA-2017-1391	ol5_u10_x86_64_patch
	openssl-devel-0.9.8e-27.el5_10.4.i386.rpm	6231990287ff0912b66c57696d2ed00c5c97c4a85390af1db7be0e5255a02d72	ELEA-2017-1391	ol5_u11_x86_64_base
	openssl-devel-0.9.8e-27.el5_10.4.i386.rpm	6231990287ff0912b66c57696d2ed00c5c97c4a85390af1db7be0e5255a02d72	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-27.el5_10.4.x86_64.rpm	86395c9c8581dca3890d305910e9203f8338e1239b8b5c388b17174c9de99810	ELEA-2017-1391	ol5_u10_x86_64_patch
	openssl-devel-0.9.8e-27.el5_10.4.x86_64.rpm	86395c9c8581dca3890d305910e9203f8338e1239b8b5c388b17174c9de99810	ELEA-2017-1391	ol5_u11_x86_64_base
	openssl-devel-0.9.8e-27.el5_10.4.x86_64.rpm	86395c9c8581dca3890d305910e9203f8338e1239b8b5c388b17174c9de99810	ELEA-2017-1391	ol5_x86_64_latest
	openssl-perl-0.9.8e-27.el5_10.4.x86_64.rpm	6f8bb006244e7398a65500981d35a27b93ae43a9afba08beb86510fdf595d7e0	ELEA-2017-1391	ol5_u10_x86_64_patch
	openssl-perl-0.9.8e-27.el5_10.4.x86_64.rpm	6f8bb006244e7398a65500981d35a27b93ae43a9afba08beb86510fdf595d7e0	ELEA-2017-1391	ol5_u11_x86_64_base
	openssl-perl-0.9.8e-27.el5_10.4.x86_64.rpm	6f8bb006244e7398a65500981d35a27b93ae43a9afba08beb86510fdf595d7e0	ELEA-2017-1391	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team