ELSA-2016-0722

ELSA-2016-0722 - openssl security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2016-05-09

Description


[1.0.1e-51.5]
- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf


Related CVEs


CVE-2016-0799
CVE-2016-2105
CVE-2016-2107
CVE-2016-2842
CVE-2016-2106
CVE-2016-2108
CVE-2016-2109

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (x86_64) openssl-1.0.1e-51.el7_2.5.src.rpm745666d91cbcfaeb22709281c29a7fc0ELSA-2017-3518
openssl-1.0.1e-51.el7_2.5.x86_64.rpm38aaea2d6c8fd2127fb64e24f950ae73ELSA-2017-3518
openssl-devel-1.0.1e-51.el7_2.5.i686.rpmfc6b1f524f7946f7207026e3c2e75cf0ELSA-2017-3518
openssl-devel-1.0.1e-51.el7_2.5.x86_64.rpme79dc4547435dd5258c98c66fae750a2ELSA-2017-3518
openssl-libs-1.0.1e-51.el7_2.5.i686.rpmd82b46e8c790cbe049cde07d9d7163a5ELSA-2017-3518
openssl-libs-1.0.1e-51.el7_2.5.x86_64.rpm061167d971c14e183156d91a5687698dELSA-2017-3518
openssl-perl-1.0.1e-51.el7_2.5.x86_64.rpm090bae777a9a215227e8763f1fd51002ELSA-2017-3518
openssl-static-1.0.1e-51.el7_2.5.i686.rpm08a7c1fe07b673ba52ccfd7eb843372cELSA-2017-3518
openssl-static-1.0.1e-51.el7_2.5.x86_64.rpm8928eaf8648e0ac02c5f6d39eeaf7716ELSA-2017-3518



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete