ELSA-2007-1003

ELSA-2007-1003 - openssl security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2007-11-27

Description

[0.9.7a-43.17.1]
- CVE-2007-5135 off by one buffer overflow in SSL_get_shared_ciphers (#309851)

[0.9.7a-43.17]
- use poll when reading random device (#236164)
- make ssl session ID context matching strict (#244436)
- openssl utility shouldnt crash on invalid PKCS#12 files (#245083)
- CVE-2007-3108 remove conditionals in BN_div, BN_mod and final
Montgomery reduction (#250580)

Related CVEs

CVE-2007-3108

CVE-2007-5135

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 4 (i386)	openssl-0.9.7a-43.17.el4_6.1.src.rpm	75bbee5903a5184f0474150595e0299e	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_6.1.i386.rpm	d1de4c0f52216bbb3569eadab0915a23	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_6.1.i686.rpm	eb60e0a707fd2071b324c769de3ee2c8	ELSA-2012-0086
	openssl-devel-0.9.7a-43.17.el4_6.1.i386.rpm	1ef82599cfd397ea902fbc2ea00f1def	ELSA-2012-0086
	openssl-perl-0.9.7a-43.17.el4_6.1.i386.rpm	4ff75aee7208d37f11f44ef70b2cc0cf	ELSA-2012-0086
Oracle Linux 4 (ia64)	openssl-0.9.7a-43.17.el4_6.1.src.rpm	75bbee5903a5184f0474150595e0299e	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_6.1.i686.rpm	eb60e0a707fd2071b324c769de3ee2c8	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_6.1.ia64.rpm	b705504ab274473e26d3c17b08ed02bb	ELSA-2012-0086
	openssl-devel-0.9.7a-43.17.el4_6.1.ia64.rpm	05a08da89a2329d4a8682b40845a2afa	ELSA-2012-0086
	openssl-perl-0.9.7a-43.17.el4_6.1.ia64.rpm	5fda16345d3eaaeb3dbe93334a162f2f	ELSA-2012-0086
Oracle Linux 4 (x86_64)	openssl-0.9.7a-43.17.el4_6.1.src.rpm	75bbee5903a5184f0474150595e0299e	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_6.1.i686.rpm	eb60e0a707fd2071b324c769de3ee2c8	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_6.1.x86_64.rpm	aa2e7b378400f1515da4d2797dae4ec5	ELSA-2012-0086
	openssl-devel-0.9.7a-43.17.el4_6.1.i386.rpm	1ef82599cfd397ea902fbc2ea00f1def	ELSA-2012-0086
	openssl-devel-0.9.7a-43.17.el4_6.1.x86_64.rpm	4f5557f10bf98681772c565bcf61f003	ELSA-2012-0086
	openssl-perl-0.9.7a-43.17.el4_6.1.x86_64.rpm	c4adaa98685ffc0f353e2d2df7ca3e8a	ELSA-2012-0086

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team