ELSA-2012-0059

ELSA-2012-0059 - openssl security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2012-01-24

Description

[1.0.0-20.1]
- fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)

Related CVEs

CVE-2011-4577

CVE-2011-4108

CVE-2011-4576

CVE-2011-4619

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	openssl-1.0.0-20.el6_2.1.src.rpm	bf1e990c45fc6d3810990cf2c87fd5b6	ELSA-2021-9150
	openssl-1.0.0-20.el6_2.1.i686.rpm	bc9b24d3d82473e91009b09d430d03d6	ELSA-2021-9150
	openssl-devel-1.0.0-20.el6_2.1.i686.rpm	8bd98a973b2f7b950f71ec92bc4b892c	ELSA-2021-9150
	openssl-perl-1.0.0-20.el6_2.1.i686.rpm	f6eec2a96c33f53506b6f44d20bf1d7c	ELSA-2021-9150
	openssl-static-1.0.0-20.el6_2.1.i686.rpm	7bc54912a53477f618de422fc55f77dd	ELSA-2021-9150
Oracle Linux 6 (x86_64)	openssl-1.0.0-20.el6_2.1.src.rpm	bf1e990c45fc6d3810990cf2c87fd5b6	ELSA-2021-9150
	openssl-1.0.0-20.el6_2.1.i686.rpm	bc9b24d3d82473e91009b09d430d03d6	ELSA-2021-9150
	openssl-1.0.0-20.el6_2.1.x86_64.rpm	6323deadc681b4ccf3336b1e2d621640	ELSA-2021-9150
	openssl-devel-1.0.0-20.el6_2.1.i686.rpm	8bd98a973b2f7b950f71ec92bc4b892c	ELSA-2021-9150
	openssl-devel-1.0.0-20.el6_2.1.x86_64.rpm	7feab7fe394a186a2bf9af0c93446d35	ELSA-2021-9150
	openssl-perl-1.0.0-20.el6_2.1.x86_64.rpm	9fd6c7f5bfa79601403b37b856707fe2	ELSA-2021-9150
	openssl-static-1.0.0-20.el6_2.1.x86_64.rpm	6ab04f9546ff649ef1473a2f2f0603be	ELSA-2021-9150

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team