ELSA-2016-0996

ELSA-2016-0996 - openssl security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2016-05-12

Description

[1.0.1e-48.1]
- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf

[1.0.1e-48]
- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn

[1.0.1e-47]
- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method

[1.0.1e-46]
- fix 1-byte memory leak in pkcs12 parse (#1229871)
- document some options of the speed command (#1197095)

[1.0.1e-45]
- fix high-precision timestamps in timestamping authority

[1.0.1e-44]
- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2

[1.0.1e-43]
- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint

Related CVEs

CVE-2016-0799

CVE-2016-2105

CVE-2016-2107

CVE-2016-2842

CVE-2016-2106

CVE-2016-2108

CVE-2016-2109

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	openssl-1.0.1e-48.el6_8.1.src.rpm	31eb452385adb6fabe4662a2e9398b83	ELBA-2017-3532
	openssl-1.0.1e-48.el6_8.1.i686.rpm	28db01006e7be469503c817d4ff8f6e0	ELBA-2017-3532
	openssl-devel-1.0.1e-48.el6_8.1.i686.rpm	303926fd42645618c9b99680177d513b	ELBA-2017-3532
	openssl-perl-1.0.1e-48.el6_8.1.i686.rpm	27075c34a3bd66b354740d51a1567344	ELBA-2017-3532
	openssl-static-1.0.1e-48.el6_8.1.i686.rpm	92c0b65c514a11276f19c84fcc93b33c	ELBA-2017-3532
Oracle Linux 6 (x86_64)	openssl-1.0.1e-48.el6_8.1.src.rpm	31eb452385adb6fabe4662a2e9398b83	ELBA-2017-3532
	openssl-1.0.1e-48.el6_8.1.i686.rpm	28db01006e7be469503c817d4ff8f6e0	ELBA-2017-3532
	openssl-1.0.1e-48.el6_8.1.x86_64.rpm	600ad9b761b541914383eb851f04a5f9	ELBA-2017-3532
	openssl-devel-1.0.1e-48.el6_8.1.i686.rpm	303926fd42645618c9b99680177d513b	ELBA-2017-3532
	openssl-devel-1.0.1e-48.el6_8.1.x86_64.rpm	2ce05c64a8fe2b10b2fdde88cb09b581	ELBA-2017-3532
	openssl-perl-1.0.1e-48.el6_8.1.x86_64.rpm	cd360c74ea43069f441f5af04917daed	ELBA-2017-3532
	openssl-static-1.0.1e-48.el6_8.1.x86_64.rpm	156052d50837bb495d5405a115d38ae8	ELBA-2017-3532

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team