ELSA-2015-1115

ELSA-2015-1115 - openssl security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2015-06-15

Description

[1.0.1e-42.8]
- improved fix for CVE-2015-1791
- add missing parts of CVE-2015-0209 fix for corectness although unexploitable

[1.0.1e-42.7]
- fix CVE-2014-8176 - invalid free in DTLS buffering code
- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
- fix CVE-2015-1791 - race condition handling NewSessionTicket
- fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function
- fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
read in multithreaded applications

Related CVEs

CVE-2014-8176

CVE-2015-1789

CVE-2015-1790

CVE-2015-1791

CVE-2015-1792

CVE-2015-3216

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	openssl-1.0.1e-30.el6_6.11.src.rpm	fb290562f425443c86b2c4bc61d9569b	ELSA-2021-9150
	openssl-1.0.1e-30.el6_6.11.i686.rpm	937584256af654c23a4ee501a543ca35	ELSA-2021-9150
	openssl-devel-1.0.1e-30.el6_6.11.i686.rpm	aa258d680f0d0062cb23f9b50ff094af	ELSA-2021-9150
	openssl-perl-1.0.1e-30.el6_6.11.i686.rpm	f0aa9ce187081af5339d9f993f99a48e	ELSA-2021-9150
	openssl-static-1.0.1e-30.el6_6.11.i686.rpm	8b44e12a63741e977992b83c34ec729a	ELSA-2021-9150
Oracle Linux 6 (x86_64)	openssl-1.0.1e-30.el6_6.11.src.rpm	fb290562f425443c86b2c4bc61d9569b	ELSA-2021-9150
	openssl-1.0.1e-30.el6_6.11.i686.rpm	937584256af654c23a4ee501a543ca35	ELSA-2021-9150
	openssl-1.0.1e-30.el6_6.11.x86_64.rpm	b1f595e0c0a3c24dad374c73b2ffc8d8	ELSA-2021-9150
	openssl-devel-1.0.1e-30.el6_6.11.i686.rpm	aa258d680f0d0062cb23f9b50ff094af	ELSA-2021-9150
	openssl-devel-1.0.1e-30.el6_6.11.x86_64.rpm	8df07592b5a2992a265b7cd0a1975830	ELSA-2021-9150
	openssl-perl-1.0.1e-30.el6_6.11.x86_64.rpm	1c89985c0b59235927dc955ff0bc98b5	ELSA-2021-9150
	openssl-static-1.0.1e-30.el6_6.11.x86_64.rpm	5e8bef34e46f323c5b0dcf37cbb040bd	ELSA-2021-9150
Oracle Linux 7 (x86_64)	openssl-1.0.1e-42.el7_1.8.src.rpm	5ec504b92fdb3e49416b5f0ebc18ff42	ELSA-2017-3518
	openssl-1.0.1e-42.el7_1.8.x86_64.rpm	3473698c7fe6fad24475fbbc6bf7cb84	ELSA-2017-3518
	openssl-devel-1.0.1e-42.el7_1.8.i686.rpm	da72851172032762c6085522a8e2877b	ELSA-2017-3518
	openssl-devel-1.0.1e-42.el7_1.8.x86_64.rpm	5e8bb6f88e36cccefef5188892231207	ELSA-2017-3518
	openssl-libs-1.0.1e-42.el7_1.8.i686.rpm	1ff6c3163073fb98bf5371098fad4156	ELSA-2017-3518
	openssl-libs-1.0.1e-42.el7_1.8.x86_64.rpm	aeb3c98afa93d3700802a0bc33c60041	ELSA-2017-3518
	openssl-perl-1.0.1e-42.el7_1.8.x86_64.rpm	b38c2af299727819c98f6e3e8c976430	ELSA-2017-3518
	openssl-static-1.0.1e-42.el7_1.8.i686.rpm	6d34a484e57479bd7c0908fa744ee175	ELSA-2017-3518
	openssl-static-1.0.1e-42.el7_1.8.x86_64.rpm	62c47637edc09125cf37aeaf3d8a6871	ELSA-2017-3518

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team