ELSA-2016-0722

ELSA-2016-0722 - openssl security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2016-05-09

Description

[1.0.1e-51.5]
- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf

Related CVEs

CVE-2016-2109

CVE-2016-2106

CVE-2016-0799

CVE-2016-2108

CVE-2016-2105

CVE-2016-2107

CVE-2016-2842

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	openssl-1.0.1e-51.el7_2.5.src.rpm	745666d91cbcfaeb22709281c29a7fc0	ELSA-2017-3518
	openssl-1.0.1e-51.el7_2.5.x86_64.rpm	38aaea2d6c8fd2127fb64e24f950ae73	ELSA-2017-3518
	openssl-devel-1.0.1e-51.el7_2.5.i686.rpm	fc6b1f524f7946f7207026e3c2e75cf0	ELSA-2017-3518
	openssl-devel-1.0.1e-51.el7_2.5.x86_64.rpm	e79dc4547435dd5258c98c66fae750a2	ELSA-2017-3518
	openssl-libs-1.0.1e-51.el7_2.5.i686.rpm	d82b46e8c790cbe049cde07d9d7163a5	ELSA-2017-3518
	openssl-libs-1.0.1e-51.el7_2.5.x86_64.rpm	061167d971c14e183156d91a5687698d	ELSA-2017-3518
	openssl-perl-1.0.1e-51.el7_2.5.x86_64.rpm	090bae777a9a215227e8763f1fd51002	ELSA-2017-3518
	openssl-static-1.0.1e-51.el7_2.5.i686.rpm	08a7c1fe07b673ba52ccfd7eb843372c	ELSA-2017-3518
	openssl-static-1.0.1e-51.el7_2.5.x86_64.rpm	8928eaf8648e0ac02c5f6d39eeaf7716	ELSA-2017-3518

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team