ELSA-2010-0977

ELSA-2010-0977 - openssl security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2010-12-13

Description

[0.9.7a-43.17.6]
- CVE-2010-4180 - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
(#659462)
- CVE-2009-3245 - fix missing checks on allocation failure in
bn_wexpand (#570924)

Related CVEs

CVE-2009-3245

CVE-2010-4180

CVE-2008-7270

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	openssl-0.9.7a-43.17.el4_8.6.src.rpm	3689380ebc5d5bb4fe72590879c01162fdb67189156826ad16daf945758f8bb8	ELSA-2012-0086	el4_i386_latest
	openssl-0.9.7a-43.17.el4_8.6.src.rpm	3689380ebc5d5bb4fe72590879c01162fdb67189156826ad16daf945758f8bb8	ELSA-2012-0086	el4_u8_i386_patch
	openssl-0.9.7a-43.17.el4_8.6.i386.rpm	260dc229f2396dd7e12dc7058a0c9f7e3d0892dd3048f8744568c846b5e7458a	ELSA-2012-0086	el4_i386_latest
	openssl-0.9.7a-43.17.el4_8.6.i386.rpm	260dc229f2396dd7e12dc7058a0c9f7e3d0892dd3048f8744568c846b5e7458a	ELSA-2012-0086	el4_u8_i386_patch
	openssl-0.9.7a-43.17.el4_8.6.i686.rpm	4d56f9f2ba76162353f8bcd0b55948ee0de5c97830ebb1fcb69ca4b91b7b970c	ELSA-2012-0086	el4_i386_latest
	openssl-0.9.7a-43.17.el4_8.6.i686.rpm	4d56f9f2ba76162353f8bcd0b55948ee0de5c97830ebb1fcb69ca4b91b7b970c	ELSA-2012-0086	el4_u8_i386_patch
	openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm	aaa44f98389ce8762f4bcea7749c31d64b894574daf93f56af53234edec6761a	ELSA-2012-0086	el4_i386_latest
	openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm	aaa44f98389ce8762f4bcea7749c31d64b894574daf93f56af53234edec6761a	ELSA-2012-0086	el4_u8_i386_patch
	openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm	4e76fb0dd0f35e9cb1b019d86a8a000695fff52ceab90e8ee83f731780a4eac8	ELSA-2012-0086	el4_i386_latest
	openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm	4e76fb0dd0f35e9cb1b019d86a8a000695fff52ceab90e8ee83f731780a4eac8	ELSA-2012-0086	el4_u8_i386_patch
Oracle Linux 4 (ia64)	openssl-0.9.7a-43.17.el4_8.6.src.rpm	3689380ebc5d5bb4fe72590879c01162fdb67189156826ad16daf945758f8bb8	ELSA-2012-0086	el4_ia64_latest
	openssl-0.9.7a-43.17.el4_8.6.src.rpm	3689380ebc5d5bb4fe72590879c01162fdb67189156826ad16daf945758f8bb8	ELSA-2012-0086	el4_u8_ia64_patch
	openssl-0.9.7a-43.17.el4_8.6.i686.rpm	4d56f9f2ba76162353f8bcd0b55948ee0de5c97830ebb1fcb69ca4b91b7b970c	ELSA-2012-0086	el4_ia64_latest
	openssl-0.9.7a-43.17.el4_8.6.i686.rpm	4d56f9f2ba76162353f8bcd0b55948ee0de5c97830ebb1fcb69ca4b91b7b970c	ELSA-2012-0086	el4_u8_ia64_patch
	openssl-0.9.7a-43.17.el4_8.6.ia64.rpm	87ce486ec36103e6d2df4dc263e7f1d554da56dbd60813309c8cce88be87d263	ELSA-2012-0086	el4_ia64_latest
	openssl-0.9.7a-43.17.el4_8.6.ia64.rpm	87ce486ec36103e6d2df4dc263e7f1d554da56dbd60813309c8cce88be87d263	ELSA-2012-0086	el4_u8_ia64_patch
	openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm	6b3f4eec3c6b256ac2023d01469045c90e65541c98f69aedb093f89a5732dbac	ELSA-2012-0086	el4_ia64_latest
	openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm	6b3f4eec3c6b256ac2023d01469045c90e65541c98f69aedb093f89a5732dbac	ELSA-2012-0086	el4_u8_ia64_patch
	openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm	c8a41bd8e05439c84108a8dccf67a14be377a18cc6b51700c1f5d81b7e0bfa4a	ELSA-2012-0086	el4_ia64_latest
	openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm	c8a41bd8e05439c84108a8dccf67a14be377a18cc6b51700c1f5d81b7e0bfa4a	ELSA-2012-0086	el4_u8_ia64_patch
Oracle Linux 4 (x86_64)	openssl-0.9.7a-43.17.el4_8.6.src.rpm	3689380ebc5d5bb4fe72590879c01162fdb67189156826ad16daf945758f8bb8	ELSA-2012-0086	el4_u8_x86_64_patch
	openssl-0.9.7a-43.17.el4_8.6.src.rpm	3689380ebc5d5bb4fe72590879c01162fdb67189156826ad16daf945758f8bb8	ELSA-2012-0086	el4_x86_64_latest
	openssl-0.9.7a-43.17.el4_8.6.i686.rpm	4d56f9f2ba76162353f8bcd0b55948ee0de5c97830ebb1fcb69ca4b91b7b970c	ELSA-2012-0086	el4_u8_x86_64_patch
	openssl-0.9.7a-43.17.el4_8.6.i686.rpm	4d56f9f2ba76162353f8bcd0b55948ee0de5c97830ebb1fcb69ca4b91b7b970c	ELSA-2012-0086	el4_x86_64_latest
	openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm	64e771fc87a80882e616cc951484a9b458ffdf0e5d1f2c52ee18cfbec6b7f9d7	ELSA-2012-0086	el4_u8_x86_64_patch
	openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm	64e771fc87a80882e616cc951484a9b458ffdf0e5d1f2c52ee18cfbec6b7f9d7	ELSA-2012-0086	el4_x86_64_latest
	openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm	aaa44f98389ce8762f4bcea7749c31d64b894574daf93f56af53234edec6761a	ELSA-2012-0086	el4_u8_x86_64_patch
	openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm	aaa44f98389ce8762f4bcea7749c31d64b894574daf93f56af53234edec6761a	ELSA-2012-0086	el4_x86_64_latest
	openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm	0bbfd00aef7d1370dfa5aa34186d68c4aee791ec2cf6ec7fe6e1adb6312d6747	ELSA-2012-0086	el4_u8_x86_64_patch
	openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm	0bbfd00aef7d1370dfa5aa34186d68c4aee791ec2cf6ec7fe6e1adb6312d6747	ELSA-2012-0086	el4_x86_64_latest
	openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm	17103f01b4e3859b04ab43c24161cc177a4059dc3bbb6c016f76ee4779bc961c	ELSA-2012-0086	el4_u8_x86_64_patch
	openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm	17103f01b4e3859b04ab43c24161cc177a4059dc3bbb6c016f76ee4779bc961c	ELSA-2012-0086	el4_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team