ELSA-2014-0679

ELSA-2014-0679 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2014-07-23

Description

[1.0.1e-34.3]
- fix CVE-2010-5298 - possible use of memory after free
- fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
- fix CVE-2014-0198 - possible NULL pointer dereference
- fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
- fix CVE-2014-0224 - SSL/TLS MITM vulnerability
- fix CVE-2014-3470 - client-side DoS when using anonymous ECDH

Related CVEs

CVE-2014-0224

CVE-2014-3470

CVE-2014-0195

CVE-2010-5298

CVE-2014-0198

CVE-2014-0221

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	openssl-1.0.1e-34.el7_0.3.src.rpm	ab1e749c07e55a5b3ba34bcb0388c530dffd4a3508b6291097ad1aa7b5d5c395	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-1.0.1e-34.el7_0.3.src.rpm	ab1e749c07e55a5b3ba34bcb0388c530dffd4a3508b6291097ad1aa7b5d5c395	ELSA-2017-3518	ol7_x86_64_optional_archive
	openssl-1.0.1e-34.el7_0.3.src.rpm	ab1e749c07e55a5b3ba34bcb0388c530dffd4a3508b6291097ad1aa7b5d5c395	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-1.0.1e-34.el7_0.3.x86_64.rpm	daffc31039b7248ae8936915ef7f458f802440f303be325b175812c936ce1693	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-1.0.1e-34.el7_0.3.x86_64.rpm	daffc31039b7248ae8936915ef7f458f802440f303be325b175812c936ce1693	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-devel-1.0.1e-34.el7_0.3.i686.rpm	7c75a82bbeb25a4eb3852d17a24d9f02f38b6f32392b30092d5e1373be659561	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-devel-1.0.1e-34.el7_0.3.i686.rpm	7c75a82bbeb25a4eb3852d17a24d9f02f38b6f32392b30092d5e1373be659561	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-devel-1.0.1e-34.el7_0.3.x86_64.rpm	c1aaccd82d3fc98d5581d368976dac8790cb5548a9ecb0e1ed9d871085f3a00f	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-devel-1.0.1e-34.el7_0.3.x86_64.rpm	c1aaccd82d3fc98d5581d368976dac8790cb5548a9ecb0e1ed9d871085f3a00f	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-libs-1.0.1e-34.el7_0.3.i686.rpm	9381c3019e60820fcc621611741a36fbf211301861441d70d7d8be56f2f4ab83	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-libs-1.0.1e-34.el7_0.3.i686.rpm	9381c3019e60820fcc621611741a36fbf211301861441d70d7d8be56f2f4ab83	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-libs-1.0.1e-34.el7_0.3.x86_64.rpm	8f2de9ce85cded33ba5294baba91b911c3a1efdb4abde8bc41029f862e6394d1	ELSA-2017-3518	ol7_x86_64_latest_archive
	openssl-libs-1.0.1e-34.el7_0.3.x86_64.rpm	8f2de9ce85cded33ba5294baba91b911c3a1efdb4abde8bc41029f862e6394d1	ELSA-2017-3518	ol7_x86_64_u0_patch
	openssl-perl-1.0.1e-34.el7_0.3.x86_64.rpm	7401292937a4f80e892679e0334fa9256bee2503c47745c02435e81bff719966	ELSA-2017-3518	ol7_x86_64_optional_archive
	openssl-static-1.0.1e-34.el7_0.3.i686.rpm	b6b0ed1a2c4431b7d5bc5a77b9a1972d6d679d70a0632a447d65ef72c9abca7f	ELSA-2017-3518	ol7_x86_64_optional_archive
	openssl-static-1.0.1e-34.el7_0.3.x86_64.rpm	81468deb2716cc7d7c5b0e2cca230fbcd45dc1d3bb85839ed461ea9a444544ee	ELSA-2017-3518	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team