ELSA-2018-4077

ELSA-2018-4077 - openssl security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2018-04-18

Description

[1.0.2k-12.0.1]
- sha256 is used for the RSA pairwise consistency test instead of sha1

[1.0.2k-12]
- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus

[1.0.2k-11]
- fix deadlock in RNG in the FIPS mode in mariadb

[1.0.2k-9]
- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication

Related CVEs

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	openssl-1.0.2k-12.0.1.ksplice1.el7.src.rpm	7430a8898bf364f060bb7a0aa3cdf3ea	ELSA-2017-3518
	openssl-1.0.2k-12.0.1.ksplice1.el7.x86_64.rpm	7135e64e2ebb5dab7d0e17ba062b4117	ELSA-2017-3518
	openssl-devel-1.0.2k-12.0.1.ksplice1.el7.i686.rpm	eaba49ae98f4a183328d1de034034b52	ELSA-2017-3518
	openssl-devel-1.0.2k-12.0.1.ksplice1.el7.x86_64.rpm	a3d66112ad6b9093d6c07b1b4b69f210	ELSA-2017-3518
	openssl-libs-1.0.2k-12.0.1.ksplice1.el7.i686.rpm	bdf8537b1a96d5d189a752d7420548aa	ELSA-2017-3518
	openssl-libs-1.0.2k-12.0.1.ksplice1.el7.x86_64.rpm	1b775f296be2bcd826936606603dc9a5	ELSA-2017-3518
	openssl-perl-1.0.2k-12.0.1.ksplice1.el7.x86_64.rpm	1cb0eeb78edfd6be8724a8d95df37800	ELSA-2017-3518
	openssl-static-1.0.2k-12.0.1.ksplice1.el7.i686.rpm	5baf6d9175b25327693130bc295bda0e	ELSA-2017-3518
	openssl-static-1.0.2k-12.0.1.ksplice1.el7.x86_64.rpm	b7c1ea061d991315ff1cdc568778261a	ELSA-2017-3518

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team