ELSA-2016-0301

ELSA-2016-0301 - openssl security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2016-03-01

Description

[1.0.1e-42.4]
- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn

[1.0.1e-42.3]
- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method

Related CVEs

CVE-2015-3197

CVE-2016-0702

CVE-2016-0705

CVE-2016-0797

CVE-2016-0800

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	openssl-1.0.1e-42.el6_7.4.src.rpm	62742f0f622eab9e268b7cab78e969e8	ELSA-2021-9150
	openssl-1.0.1e-42.el6_7.4.i686.rpm	5c0cab6ce5e9915e5bc0df6ca017b52a	ELSA-2021-9150
	openssl-devel-1.0.1e-42.el6_7.4.i686.rpm	ded1e9f16d00c1d573b485ff58941bc3	ELSA-2021-9150
	openssl-perl-1.0.1e-42.el6_7.4.i686.rpm	6e4b37a27eff9be7120d0e0c07f4a72f	ELSA-2021-9150
	openssl-static-1.0.1e-42.el6_7.4.i686.rpm	b473f5b57ccd5bc60d024956cd5c7529	ELSA-2021-9150
Oracle Linux 6 (x86_64)	openssl-1.0.1e-42.el6_7.4.src.rpm	62742f0f622eab9e268b7cab78e969e8	ELSA-2021-9150
	openssl-1.0.1e-42.el6_7.4.i686.rpm	5c0cab6ce5e9915e5bc0df6ca017b52a	ELSA-2021-9150
	openssl-1.0.1e-42.el6_7.4.x86_64.rpm	473fbf62253a59c91ac62eb93d335311	ELSA-2021-9150
	openssl-devel-1.0.1e-42.el6_7.4.i686.rpm	ded1e9f16d00c1d573b485ff58941bc3	ELSA-2021-9150
	openssl-devel-1.0.1e-42.el6_7.4.x86_64.rpm	5745ac295ad55374de766b44b0a097b5	ELSA-2021-9150
	openssl-perl-1.0.1e-42.el6_7.4.x86_64.rpm	9df53f0e7059db8ab4523c0aa0703c9a	ELSA-2021-9150
	openssl-static-1.0.1e-42.el6_7.4.x86_64.rpm	1be94a929f9b74b064cf93924d996d21	ELSA-2021-9150
Oracle Linux 7 (x86_64)	openssl-1.0.1e-51.el7_2.4.src.rpm	0a767ed4b2c085e92c32b20fb3e180af	ELSA-2017-3518
	openssl-1.0.1e-51.el7_2.4.x86_64.rpm	06617ec99c7f1aec8077ff7bbca13a1c	ELSA-2017-3518
	openssl-devel-1.0.1e-51.el7_2.4.i686.rpm	907534f2359baa3b366c5ae27e4e93be	ELSA-2017-3518
	openssl-devel-1.0.1e-51.el7_2.4.x86_64.rpm	bfe9303001ef2129cc6af48cfbda171a	ELSA-2017-3518
	openssl-libs-1.0.1e-51.el7_2.4.i686.rpm	0cbb38b1b811971d4b700f71e641575a	ELSA-2017-3518
	openssl-libs-1.0.1e-51.el7_2.4.x86_64.rpm	55947a46060b8c1ee58cebfa4d75b334	ELSA-2017-3518
	openssl-perl-1.0.1e-51.el7_2.4.x86_64.rpm	59567a3b2d4bd3417cae9874d65c6311	ELSA-2017-3518
	openssl-static-1.0.1e-51.el7_2.4.i686.rpm	76b0e0e974fc65abb650ed9af772a915	ELSA-2017-3518
	openssl-static-1.0.1e-51.el7_2.4.x86_64.rpm	fdcc73e8bee2b14c4d8595393866334c	ELSA-2017-3518

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team