ELSA-2016-0302

ELSA-2016-0302 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2016-03-01

Description

[0.9.8e-39.0.1]
- To disable SSLv2 client connections create the file
/etc/sysconfig/openssl-ssl-client-kill-sslv2 (John Haxby) [orabug 21673934]
- Backport openssl 08-Jan-2015 security fixes (John Haxby) [orabug 20409893]
- fix CVE-2014-3570 - Bignum squaring may produce incorrect results
- fix CVE-2014-3571 - DTLS segmentation fault in dtls1_get_record
- fix CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client]

[0.9.8e-39]
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn

[0.9.8e-38]
- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method (can be reenabled
by setting environment variable OPENSSL_ENABLE_SSL2)

Related CVEs

CVE-2015-3197

CVE-2016-0797

CVE-2016-0800

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	openssl-0.9.8e-39.0.1.el5_11.src.rpm	b73c54f2569d7a46f060549cf1f550251a3a2b0e30e7cb4a652f0a64c5ce2504	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-39.0.1.el5_11.src.rpm	b73c54f2569d7a46f060549cf1f550251a3a2b0e30e7cb4a652f0a64c5ce2504	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-0.9.8e-39.0.1.el5_11.i386.rpm	7aa9ba553826e5ce0c31e0f8fc04121711a0261b41e31e06055139c9b9452795	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-39.0.1.el5_11.i386.rpm	7aa9ba553826e5ce0c31e0f8fc04121711a0261b41e31e06055139c9b9452795	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-0.9.8e-39.0.1.el5_11.i686.rpm	8b10a7d6e100cff9be8719caf907e881bf6252861f40d565f080f1f0c564dcc0	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-39.0.1.el5_11.i686.rpm	8b10a7d6e100cff9be8719caf907e881bf6252861f40d565f080f1f0c564dcc0	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-devel-0.9.8e-39.0.1.el5_11.i386.rpm	2c7be567776b571f860547ce55f40906934856c66af0ad1d5587ab0f487ca16d	ELEA-2017-1391	ol5_i386_latest
	openssl-devel-0.9.8e-39.0.1.el5_11.i386.rpm	2c7be567776b571f860547ce55f40906934856c66af0ad1d5587ab0f487ca16d	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-perl-0.9.8e-39.0.1.el5_11.i386.rpm	6bebb5e33d08c2cfd951a0cff864f21432b7eea0cfe0820f78e54aacc4858657	ELEA-2017-1391	ol5_i386_latest
	openssl-perl-0.9.8e-39.0.1.el5_11.i386.rpm	6bebb5e33d08c2cfd951a0cff864f21432b7eea0cfe0820f78e54aacc4858657	ELEA-2017-1391	ol5_u11_i386_patch
Oracle Linux 5 (ia64)	openssl-0.9.8e-39.0.1.el5_11.src.rpm	b73c54f2569d7a46f060549cf1f550251a3a2b0e30e7cb4a652f0a64c5ce2504	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-39.0.1.el5_11.src.rpm	b73c54f2569d7a46f060549cf1f550251a3a2b0e30e7cb4a652f0a64c5ce2504	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-0.9.8e-39.0.1.el5_11.i686.rpm	8b10a7d6e100cff9be8719caf907e881bf6252861f40d565f080f1f0c564dcc0	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-39.0.1.el5_11.i686.rpm	8b10a7d6e100cff9be8719caf907e881bf6252861f40d565f080f1f0c564dcc0	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-0.9.8e-39.0.1.el5_11.ia64.rpm	001679857204ce34977e74847ddcfed130e6c3aaae2c834bc16ef7f0ce6c782b	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-39.0.1.el5_11.ia64.rpm	001679857204ce34977e74847ddcfed130e6c3aaae2c834bc16ef7f0ce6c782b	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-devel-0.9.8e-39.0.1.el5_11.ia64.rpm	147b75b4227af27b814c376d8e76f242a36ac6e624fc17ad62d1af79847ab4c5	ELEA-2017-1391	ol5_ia64_latest
	openssl-devel-0.9.8e-39.0.1.el5_11.ia64.rpm	147b75b4227af27b814c376d8e76f242a36ac6e624fc17ad62d1af79847ab4c5	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-perl-0.9.8e-39.0.1.el5_11.ia64.rpm	628e5a479b68520b0aff6803c4b929f74c937cfcef25e1a5613c2d9a823e8a8d	ELEA-2017-1391	ol5_ia64_latest
	openssl-perl-0.9.8e-39.0.1.el5_11.ia64.rpm	628e5a479b68520b0aff6803c4b929f74c937cfcef25e1a5613c2d9a823e8a8d	ELEA-2017-1391	ol5_u11_ia64_patch
Oracle Linux 5 (x86_64)	openssl-0.9.8e-39.0.1.el5_11.src.rpm	b73c54f2569d7a46f060549cf1f550251a3a2b0e30e7cb4a652f0a64c5ce2504	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-39.0.1.el5_11.src.rpm	b73c54f2569d7a46f060549cf1f550251a3a2b0e30e7cb4a652f0a64c5ce2504	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-39.0.1.el5_11.i686.rpm	8b10a7d6e100cff9be8719caf907e881bf6252861f40d565f080f1f0c564dcc0	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-39.0.1.el5_11.i686.rpm	8b10a7d6e100cff9be8719caf907e881bf6252861f40d565f080f1f0c564dcc0	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-39.0.1.el5_11.x86_64.rpm	d8619cdd007eda5597112be74ae331994004a2a4463d8cf65e985a6000a39823	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-39.0.1.el5_11.x86_64.rpm	d8619cdd007eda5597112be74ae331994004a2a4463d8cf65e985a6000a39823	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-39.0.1.el5_11.i386.rpm	2c7be567776b571f860547ce55f40906934856c66af0ad1d5587ab0f487ca16d	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-devel-0.9.8e-39.0.1.el5_11.i386.rpm	2c7be567776b571f860547ce55f40906934856c66af0ad1d5587ab0f487ca16d	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-39.0.1.el5_11.x86_64.rpm	39f973ab9a4d7eaf67a55aa8df0255f13f4b845c1e0da74300c64065d77cc803	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-devel-0.9.8e-39.0.1.el5_11.x86_64.rpm	39f973ab9a4d7eaf67a55aa8df0255f13f4b845c1e0da74300c64065d77cc803	ELEA-2017-1391	ol5_x86_64_latest
	openssl-perl-0.9.8e-39.0.1.el5_11.x86_64.rpm	4c244bbf85801d74f70f49665f47d0820d5083512cb550f7390bc2bef53f8f81	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-perl-0.9.8e-39.0.1.el5_11.x86_64.rpm	4c244bbf85801d74f70f49665f47d0820d5083512cb550f7390bc2bef53f8f81	ELEA-2017-1391	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team