ELSA-2016-3627

ELSA-2016-3627 - openssl security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2016-10-13

Description

[0.9.8e-40.0.3]
- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
112 bit effective strength

Related CVEs

CVE-2016-2177

CVE-2016-6306

CVE-2016-2178

CVE-2016-2182

CVE-2016-2183

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	openssl-0.9.8e-40.0.3.el5_11.src.rpm	22de86673ac327d409724b40336dc190	ELEA-2017-1391
	openssl-0.9.8e-40.0.3.el5_11.i386.rpm	9eee7eb765bfaa709df47eb065150624	ELEA-2017-1391
	openssl-0.9.8e-40.0.3.el5_11.i686.rpm	ca1afd7c8672af640e4c7c74befec53c	ELEA-2017-1391
	openssl-devel-0.9.8e-40.0.3.el5_11.i386.rpm	35aef050ab26ed189e59d8ace6ebf30c	ELEA-2017-1391
	openssl-perl-0.9.8e-40.0.3.el5_11.i386.rpm	38e58a2cad97073ae8d29647f08f5455	ELEA-2017-1391
Oracle Linux 5 (ia64)	openssl-0.9.8e-40.0.3.el5_11.src.rpm	22de86673ac327d409724b40336dc190	ELEA-2017-1391
	openssl-0.9.8e-40.0.3.el5_11.i686.rpm	ca1afd7c8672af640e4c7c74befec53c	ELEA-2017-1391
	openssl-0.9.8e-40.0.3.el5_11.ia64.rpm	b507e57912f494010f4ef65c80318aa5	ELEA-2017-1391
	openssl-devel-0.9.8e-40.0.3.el5_11.ia64.rpm	99a20a3837baac897bb847d76d67b657	ELEA-2017-1391
	openssl-perl-0.9.8e-40.0.3.el5_11.ia64.rpm	f461bcf344a8bb506cec84eed74bd858	ELEA-2017-1391
Oracle Linux 5 (x86_64)	openssl-0.9.8e-40.0.3.el5_11.src.rpm	22de86673ac327d409724b40336dc190	ELEA-2017-1391
	openssl-0.9.8e-40.0.3.el5_11.i686.rpm	ca1afd7c8672af640e4c7c74befec53c	ELEA-2017-1391
	openssl-0.9.8e-40.0.3.el5_11.x86_64.rpm	70e24c71e499329beb8e3cacc438a6d7	ELEA-2017-1391
	openssl-devel-0.9.8e-40.0.3.el5_11.i386.rpm	35aef050ab26ed189e59d8ace6ebf30c	ELEA-2017-1391
	openssl-devel-0.9.8e-40.0.3.el5_11.x86_64.rpm	3ab6b91eaac471139c42d15b662a2d94	ELEA-2017-1391
	openssl-perl-0.9.8e-40.0.3.el5_11.x86_64.rpm	e91d2ff2d300567f8ad9c425cdddb124	ELEA-2017-1391

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team