ELSA-2010-0054

ELSA-2010-0054 - openssl security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2010-01-20

Description

[0.9.8e-12.1]
- fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
- fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
is called prematurely by application (#546707)

Related CVEs

CVE-2009-2409

CVE-2009-4355

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	openssl-0.9.8e-12.el5_4.1.src.rpm	7d11c159449e9fa48a34035a45825df249980877b3de0a42528c32743a82d541	ELEA-2017-1391	el5_u4_i386_patch
	openssl-0.9.8e-12.el5_4.1.i386.rpm	75b7c9d5be329ea4375861d68a5363307e392a1e18b879d47cd1f7377ff88096	ELEA-2017-1391	el5_u4_i386_patch
	openssl-0.9.8e-12.el5_4.1.i686.rpm	96c0e68cf29502d1f294813d22d386c677a4ec118e0b42c8ac482c40aba35893	ELEA-2017-1391	el5_u4_i386_patch
	openssl-devel-0.9.8e-12.el5_4.1.i386.rpm	e842f83cb2dbef4eb0d17f12299ee00be4aa45880ab15718b84812ff1fd2ad7c	ELEA-2017-1391	el5_u4_i386_patch
	openssl-perl-0.9.8e-12.el5_4.1.i386.rpm	e1e6d4264dd479e467fd4935979c5532dbca660f1242bf061d3a10b09eb1b026	ELEA-2017-1391	el5_u4_i386_patch
Oracle Linux 5 (ia64)	openssl-0.9.8e-12.el5_4.1.src.rpm	7d11c159449e9fa48a34035a45825df249980877b3de0a42528c32743a82d541	ELEA-2017-1391	el5_u4_ia64_patch
	openssl-0.9.8e-12.el5_4.1.i686.rpm	96c0e68cf29502d1f294813d22d386c677a4ec118e0b42c8ac482c40aba35893	ELEA-2017-1391	el5_u4_ia64_patch
	openssl-0.9.8e-12.el5_4.1.ia64.rpm	1623d8bc4e138e1101a17aa986783a8918172d62ac3dab28425861e5ef6886ea	ELEA-2017-1391	el5_u4_ia64_patch
	openssl-devel-0.9.8e-12.el5_4.1.ia64.rpm	3a5c3f1dd114438a1d73dfae92b92b347bb58926c9a37e594988543f5d43766c	ELEA-2017-1391	el5_u4_ia64_patch
	openssl-perl-0.9.8e-12.el5_4.1.ia64.rpm	775bb848181143ee4615a8ea3476109d89141a6d7ca9f3dda779f20cf8c59a70	ELEA-2017-1391	el5_u4_ia64_patch
Oracle Linux 5 (x86_64)	openssl-0.9.8e-12.el5_4.1.src.rpm	7d11c159449e9fa48a34035a45825df249980877b3de0a42528c32743a82d541	ELEA-2017-1391	el5_u4_x86_64_patch
	openssl-0.9.8e-12.el5_4.1.i686.rpm	96c0e68cf29502d1f294813d22d386c677a4ec118e0b42c8ac482c40aba35893	ELEA-2017-1391	el5_u4_x86_64_patch
	openssl-0.9.8e-12.el5_4.1.x86_64.rpm	43e6de0cb9cb1a80e689484bc70b521a9b0d67117b8c836d77ffbb860d0cd850	ELEA-2017-1391	el5_u4_x86_64_patch
	openssl-devel-0.9.8e-12.el5_4.1.i386.rpm	e842f83cb2dbef4eb0d17f12299ee00be4aa45880ab15718b84812ff1fd2ad7c	ELEA-2017-1391	el5_u4_x86_64_patch
	openssl-devel-0.9.8e-12.el5_4.1.x86_64.rpm	bceff607279886ddce94fefe040ddf416c52fef0a5c2646be068e82bfeda7f60	ELEA-2017-1391	el5_u4_x86_64_patch
	openssl-perl-0.9.8e-12.el5_4.1.x86_64.rpm	7625e43daeb7f72677402d74f5adf44df6553ea573f6d6102f190433901e51b6	ELEA-2017-1391	el5_u4_x86_64_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team