ELSA-2015-0800

ELSA-2015-0800 - openssl security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2015-04-13

Description

[0.9.8e-33]
- fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
certificate fingerprint issues
- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
ciphersuites and on server
- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
- fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
- fix CVE-2015-0292 - integer underflow in base64 decoder
- fix CVE-2015-0293 - triggerable assert in SSLv2 server

Related CVEs

CVE-2015-0288

CVE-2015-0292

CVE-2015-0289

CVE-2014-8275

CVE-2015-0287

CVE-2015-0204

CVE-2015-0293

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	openssl-0.9.8e-33.0.1.el5_11.src.rpm	9e578c81adc7efd3ed09e78ce0700b2fd34ad2075c395c606d8d68ec0af21422	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-33.0.1.el5_11.src.rpm	9e578c81adc7efd3ed09e78ce0700b2fd34ad2075c395c606d8d68ec0af21422	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-0.9.8e-33.0.1.el5_11.i386.rpm	8bb03bde83330f93f74da14b44fbb9a2907a1efd428580da3c57212afc239f48	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-33.0.1.el5_11.i386.rpm	8bb03bde83330f93f74da14b44fbb9a2907a1efd428580da3c57212afc239f48	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-0.9.8e-33.0.1.el5_11.i686.rpm	235a121a4126dc42c5362037b4b3d797a5d346ea28482f470f1d67c54b3553e2	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-33.0.1.el5_11.i686.rpm	235a121a4126dc42c5362037b4b3d797a5d346ea28482f470f1d67c54b3553e2	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-devel-0.9.8e-33.0.1.el5_11.i386.rpm	e9d63235af92434bd2eed5335706a5c73fd132f4c65dea8944398c181ec794be	ELEA-2017-1391	ol5_i386_latest
	openssl-devel-0.9.8e-33.0.1.el5_11.i386.rpm	e9d63235af92434bd2eed5335706a5c73fd132f4c65dea8944398c181ec794be	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-perl-0.9.8e-33.0.1.el5_11.i386.rpm	25573af9a7cf92ec23cd66c5ec731efd66c90b0cf73f0c5da3dff9947dd9d6b9	ELEA-2017-1391	ol5_i386_latest
	openssl-perl-0.9.8e-33.0.1.el5_11.i386.rpm	25573af9a7cf92ec23cd66c5ec731efd66c90b0cf73f0c5da3dff9947dd9d6b9	ELEA-2017-1391	ol5_u11_i386_patch
Oracle Linux 5 (ia64)	openssl-0.9.8e-33.0.1.el5_11.src.rpm	9e578c81adc7efd3ed09e78ce0700b2fd34ad2075c395c606d8d68ec0af21422	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-33.0.1.el5_11.src.rpm	9e578c81adc7efd3ed09e78ce0700b2fd34ad2075c395c606d8d68ec0af21422	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-0.9.8e-33.0.1.el5_11.i686.rpm	235a121a4126dc42c5362037b4b3d797a5d346ea28482f470f1d67c54b3553e2	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-33.0.1.el5_11.i686.rpm	235a121a4126dc42c5362037b4b3d797a5d346ea28482f470f1d67c54b3553e2	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-0.9.8e-33.0.1.el5_11.ia64.rpm	b91d44f53028da733e370556a572eaa8b3ebfa46478906b302735573ec8c4a02	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-33.0.1.el5_11.ia64.rpm	b91d44f53028da733e370556a572eaa8b3ebfa46478906b302735573ec8c4a02	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-devel-0.9.8e-33.0.1.el5_11.ia64.rpm	0337d73d54e85ac89e21cac04c0de0195221655c92a08ecbedbb1e9089dcd884	ELEA-2017-1391	ol5_ia64_latest
	openssl-devel-0.9.8e-33.0.1.el5_11.ia64.rpm	0337d73d54e85ac89e21cac04c0de0195221655c92a08ecbedbb1e9089dcd884	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-perl-0.9.8e-33.0.1.el5_11.ia64.rpm	621cb7e8c07090f6d0dc38594cd34474d0c70600a5778a008ee8e25ee2c2920c	ELEA-2017-1391	ol5_ia64_latest
	openssl-perl-0.9.8e-33.0.1.el5_11.ia64.rpm	621cb7e8c07090f6d0dc38594cd34474d0c70600a5778a008ee8e25ee2c2920c	ELEA-2017-1391	ol5_u11_ia64_patch
Oracle Linux 5 (x86_64)	openssl-0.9.8e-33.0.1.el5_11.src.rpm	9e578c81adc7efd3ed09e78ce0700b2fd34ad2075c395c606d8d68ec0af21422	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-33.0.1.el5_11.src.rpm	9e578c81adc7efd3ed09e78ce0700b2fd34ad2075c395c606d8d68ec0af21422	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-33.0.1.el5_11.i686.rpm	235a121a4126dc42c5362037b4b3d797a5d346ea28482f470f1d67c54b3553e2	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-33.0.1.el5_11.i686.rpm	235a121a4126dc42c5362037b4b3d797a5d346ea28482f470f1d67c54b3553e2	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-33.0.1.el5_11.x86_64.rpm	5b78e126dd1a5807f05c1b05bf6c44f1fa77c73e34bad6ef4de2daebfdd2d1f6	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-33.0.1.el5_11.x86_64.rpm	5b78e126dd1a5807f05c1b05bf6c44f1fa77c73e34bad6ef4de2daebfdd2d1f6	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-33.0.1.el5_11.i386.rpm	e9d63235af92434bd2eed5335706a5c73fd132f4c65dea8944398c181ec794be	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-devel-0.9.8e-33.0.1.el5_11.i386.rpm	e9d63235af92434bd2eed5335706a5c73fd132f4c65dea8944398c181ec794be	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-33.0.1.el5_11.x86_64.rpm	818e266dc6478bd5820e9c09286e9cfa25379c9cebb4c36d3ac7df204a05104a	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-devel-0.9.8e-33.0.1.el5_11.x86_64.rpm	818e266dc6478bd5820e9c09286e9cfa25379c9cebb4c36d3ac7df204a05104a	ELEA-2017-1391	ol5_x86_64_latest
	openssl-perl-0.9.8e-33.0.1.el5_11.x86_64.rpm	669efaa203f713a7f153916f4979a2963482c0145650fedaecf3338451fc2bcb	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-perl-0.9.8e-33.0.1.el5_11.x86_64.rpm	669efaa203f713a7f153916f4979a2963482c0145650fedaecf3338451fc2bcb	ELEA-2017-1391	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team