ELSA-2006-0661

ELSA-2006-0661 - Important openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2006-11-30

Description

[0.9.7a-43.14]
- fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
- fix CVE-2006-2940 - parasitic public keys DoS (#207274)
- fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
- fix CVE-2006-4343 - sslv2 client DoS (#206940)

[0.9.7a-43.11]
- fix CVE-2006-4339 - prevent attack on PKCS#1 v1.5 signatures (#205180)
- don't overwrite customized ca-bundle.pem on upgrade (#175811)

Related CVEs

CVE-2006-4339

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	openssl-0.9.7a-43.14.src.rpm	ce7d2617df3dc887ae8dec5d4ac4be3feb3a6ffa6306bfe990a672ead3f2e283	ELSA-2012-0086	el4_i386_latest
	openssl-0.9.7a-43.14.src.rpm	ce7d2617df3dc887ae8dec5d4ac4be3feb3a6ffa6306bfe990a672ead3f2e283	ELSA-2012-0086	el4_u4_i386_patch
	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_i386_latest
	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_u4_i386_patch
	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_u5_i386_base
	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_u6_i386_base
	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_u7_i386_base
	openssl-0.9.7a-43.14.i386.rpm	4c3e30436c910f5ff1ef880890df91454beadbadc7b7d0371ff4a07e84c424af	ELSA-2012-0086	el4_i386_latest
	openssl-0.9.7a-43.14.i386.rpm	4c3e30436c910f5ff1ef880890df91454beadbadc7b7d0371ff4a07e84c424af	ELSA-2012-0086	el4_u4_i386_patch
	openssl-0.9.7a-43.14.i686.rpm	5051b8bb646304413945eefdccf58eeb080b9bfb11db6038cfc27bafb18ae349	ELSA-2012-0086	el4_i386_latest
	openssl-0.9.7a-43.14.i686.rpm	5051b8bb646304413945eefdccf58eeb080b9bfb11db6038cfc27bafb18ae349	ELSA-2012-0086	el4_u4_i386_patch
	openssl-devel-0.9.7a-43.14.i386.rpm	d7fa97e155fd14b0cbafbcf3add6db100babd1cb5d4bf80964a78b0d7afa64ec	ELSA-2012-0086	el4_i386_latest
	openssl-devel-0.9.7a-43.14.i386.rpm	d7fa97e155fd14b0cbafbcf3add6db100babd1cb5d4bf80964a78b0d7afa64ec	ELSA-2012-0086	el4_u4_i386_patch
	openssl-perl-0.9.7a-43.14.i386.rpm	0a1023ef96f337a23b36890f94636d2b8e5d9e80a49e491ecfe77dd903ae74d5	ELSA-2012-0086	el4_i386_latest
	openssl-perl-0.9.7a-43.14.i386.rpm	0a1023ef96f337a23b36890f94636d2b8e5d9e80a49e491ecfe77dd903ae74d5	ELSA-2012-0086	el4_u4_i386_patch
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_i386_latest
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u4_i386_patch
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u5_i386_base
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u6_i386_base
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u7_i386_base
Oracle Linux 4 (ia64)	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_ia64_latest
	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_u6_ia64_base
	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_u7_ia64_base
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_ia64_latest
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u6_ia64_base
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u7_ia64_base
	openssl096b-0.9.6b-22.46.ia64.rpm	f2b956076ada35ca50a070ab570e31a9a341b2600b99a158870d53bbc3cc0a29	ELSA-2010-0173	el4_ia64_latest
	openssl096b-0.9.6b-22.46.ia64.rpm	f2b956076ada35ca50a070ab570e31a9a341b2600b99a158870d53bbc3cc0a29	ELSA-2010-0173	el4_u6_ia64_base
	openssl096b-0.9.6b-22.46.ia64.rpm	f2b956076ada35ca50a070ab570e31a9a341b2600b99a158870d53bbc3cc0a29	ELSA-2010-0173	el4_u7_ia64_base
Oracle Linux 4 (x86_64)	openssl-0.9.7a-43.14.src.rpm	b14587ab5cf21e21b7c7b1451e3ce73307c8112e0ef7744b6d5968b7b3749233	ELSA-2012-0086	el4_u4_x86_64_patch
	openssl-0.9.7a-43.14.src.rpm	b14587ab5cf21e21b7c7b1451e3ce73307c8112e0ef7744b6d5968b7b3749233	ELSA-2012-0086	el4_x86_64_latest
	openssl096b-0.9.6b-22.46.src.rpm	bf06b69304f4b9ddf6bc73657722a91238cac0139de5006da72703ce1d4c65fb	ELSA-2010-0173	el4_u4_x86_64_patch
	openssl096b-0.9.6b-22.46.src.rpm	bf06b69304f4b9ddf6bc73657722a91238cac0139de5006da72703ce1d4c65fb	ELSA-2010-0173	el4_u7_x86_64_base
	openssl096b-0.9.6b-22.46.src.rpm	bf06b69304f4b9ddf6bc73657722a91238cac0139de5006da72703ce1d4c65fb	ELSA-2010-0173	el4_x86_64_latest
	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_u5_x86_64_base
	openssl096b-0.9.6b-22.46.src.rpm	c701f80a16503678dabcbfdcc60194b1db7cd648891bf22123a911bfc9b949d2	ELSA-2010-0173	el4_u6_x86_64_base
	openssl-0.9.7a-43.14.i686.rpm	5051b8bb646304413945eefdccf58eeb080b9bfb11db6038cfc27bafb18ae349	ELSA-2012-0086	el4_u4_x86_64_patch
	openssl-0.9.7a-43.14.i686.rpm	5051b8bb646304413945eefdccf58eeb080b9bfb11db6038cfc27bafb18ae349	ELSA-2012-0086	el4_x86_64_latest
	openssl-0.9.7a-43.14.x86_64.rpm	b083c37d36dfe1a216641e120e6f2a244aa3379dfe677a7439eda07ffd8c9876	ELSA-2012-0086	el4_u4_x86_64_patch
	openssl-0.9.7a-43.14.x86_64.rpm	b083c37d36dfe1a216641e120e6f2a244aa3379dfe677a7439eda07ffd8c9876	ELSA-2012-0086	el4_x86_64_latest
	openssl-devel-0.9.7a-43.14.x86_64.rpm	fa94e5f765a85379245162edf27888cefffc62201d7e28a7cf180ecc8e4678a3	ELSA-2012-0086	el4_u4_x86_64_patch
	openssl-devel-0.9.7a-43.14.x86_64.rpm	fa94e5f765a85379245162edf27888cefffc62201d7e28a7cf180ecc8e4678a3	ELSA-2012-0086	el4_x86_64_latest
	openssl-perl-0.9.7a-43.14.x86_64.rpm	9b4ac62c073ad026625b133364e09e291a3316df990db12372b2b67ae565c233	ELSA-2012-0086	el4_u4_x86_64_patch
	openssl-perl-0.9.7a-43.14.x86_64.rpm	9b4ac62c073ad026625b133364e09e291a3316df990db12372b2b67ae565c233	ELSA-2012-0086	el4_x86_64_latest
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u4_x86_64_patch
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u5_x86_64_base
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u6_x86_64_base
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_u7_x86_64_base
	openssl096b-0.9.6b-22.46.i386.rpm	f6d39a3015a0458a9b3214104661f6929fc67d65e0190df7061280f3623b432b	ELSA-2010-0173	el4_x86_64_latest
	openssl096b-0.9.6b-22.46.x86_64.rpm	3f876769a3a684885e317c5f104013680dd29308b58103966c6bc0fdca460aa6	ELSA-2010-0173	el4_u4_x86_64_patch
	openssl096b-0.9.6b-22.46.x86_64.rpm	3f876769a3a684885e317c5f104013680dd29308b58103966c6bc0fdca460aa6	ELSA-2010-0173	el4_u5_x86_64_base
	openssl096b-0.9.6b-22.46.x86_64.rpm	3f876769a3a684885e317c5f104013680dd29308b58103966c6bc0fdca460aa6	ELSA-2010-0173	el4_u6_x86_64_base
	openssl096b-0.9.6b-22.46.x86_64.rpm	3f876769a3a684885e317c5f104013680dd29308b58103966c6bc0fdca460aa6	ELSA-2010-0173	el4_u7_x86_64_base
	openssl096b-0.9.6b-22.46.x86_64.rpm	3f876769a3a684885e317c5f104013680dd29308b58103966c6bc0fdca460aa6	ELSA-2010-0173	el4_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team