ELSA-2018-4267

ELSA-2018-4267 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2018-11-06

Description

[1.0.2k-16.0.1]
- sha256 is used for the RSA pairwise consistency test instead of sha1

[1.0.2k-16]
- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)

[1.0.2k-14]
- ppc64le is not multilib architecture (#1585004)

[1.0.2k-13]
- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure

Related CVEs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	openssl-1.0.2k-16.0.1.ksplice1.el7.src.rpm	46bc81ca9b2512789c441a1d6749ef99474bbf500ff2f03723d4ec42d21a15e8	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-1.0.2k-16.0.1.ksplice1.el7.x86_64.rpm	0bb61649088dbcf50ea44f5824b24513d7e126feb5c39612248f99a5cd19b5d7	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-devel-1.0.2k-16.0.1.ksplice1.el7.i686.rpm	508eb4db6fc4d0b61bc3ba32743a047eb6e2ab953380892511c1847523c13677	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-devel-1.0.2k-16.0.1.ksplice1.el7.x86_64.rpm	36d6dccc8498f0a1adc78a4d8223be8167ab3c0b50d8df6048946c7564e7e728	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-libs-1.0.2k-16.0.1.ksplice1.el7.i686.rpm	6177e42758f5094f013097a31296c6205e538216946d6d4d7ad71e793374106a	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-libs-1.0.2k-16.0.1.ksplice1.el7.x86_64.rpm	6e42a869284e34b696d0c7d6bb9590f39e0bd3657b2ae1900417538383a57a12	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-perl-1.0.2k-16.0.1.ksplice1.el7.x86_64.rpm	ff8a3d960b65495a9094a4a30e44ffc7e12313c6e8edcd41eaacd50ec4743de9	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-static-1.0.2k-16.0.1.ksplice1.el7.i686.rpm	ff8ae06320705aa677f1fb216d2216fc9a36bedd4e6931ddb1d1b772717f8681	ELSA-2017-3518	ol7_x86_64_userspace_ksplice
	openssl-static-1.0.2k-16.0.1.ksplice1.el7.x86_64.rpm	89fe4bed087ae1797051501bcb111f7765429268a0faf4b8f5be9effb2266991	ELSA-2017-3518	ol7_x86_64_userspace_ksplice

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team