ELSA-2010-0977

ELSA-2010-0977 - openssl security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2010-12-13

Description

[0.9.7a-43.17.6]
- CVE-2010-4180 - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
(#659462)
- CVE-2009-3245 - fix missing checks on allocation failure in
bn_wexpand (#570924)

Related CVEs

CVE-2008-7270

CVE-2009-3245

CVE-2010-4180

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 4 (i386)	openssl-0.9.7a-43.17.el4_8.6.src.rpm	733773a416fa3dba1a40d019b8292551	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_8.6.i386.rpm	164b36d8eade8e35bb27601613dc875d	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_8.6.i686.rpm	073977805ee9f2b2cbfa2c32405e46e8	ELSA-2012-0086
	openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm	935cfc4a2a63e908fe07da311056b08f	ELSA-2012-0086
	openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm	4030af7cd7a918b1087a5c13c741f7c5	ELSA-2012-0086
Oracle Linux 4 (ia64)	openssl-0.9.7a-43.17.el4_8.6.src.rpm	733773a416fa3dba1a40d019b8292551	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_8.6.i686.rpm	073977805ee9f2b2cbfa2c32405e46e8	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_8.6.ia64.rpm	3e50d9401af7267b4cbd827862a63a94	ELSA-2012-0086
	openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm	61e2cca1a0894c258dcd771fe9329097	ELSA-2012-0086
	openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm	b32ccddcef5bd8383775486a69d84ff8	ELSA-2012-0086
Oracle Linux 4 (x86_64)	openssl-0.9.7a-43.17.el4_8.6.src.rpm	733773a416fa3dba1a40d019b8292551	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_8.6.i686.rpm	073977805ee9f2b2cbfa2c32405e46e8	ELSA-2012-0086
	openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm	f1c179e0facc2e6115babde65be8c823	ELSA-2012-0086
	openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm	935cfc4a2a63e908fe07da311056b08f	ELSA-2012-0086
	openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm	6fe2925286b31b2aea2652f8d9f0d0b5	ELSA-2012-0086
	openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm	d9d1678a989eea6882610cfbb03d98f8	ELSA-2012-0086

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team