ELSA-2016-3556

ELSA-2016-3556 - openssl security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2016-05-09

Description

[1.0.1e-51.5]
- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf

[1.0.1e-51.4]
- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn

[1.0.1e-51.3]
- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method

[1.0.1e-51.2]
- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2

[1.0.1e-51.1]
- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint

Related CVEs

CVE-2016-0799

CVE-2016-2105

CVE-2016-2107

CVE-2016-2842

CVE-2016-2106

CVE-2016-2108

CVE-2016-2109

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	openssl-1.0.1e-51.ksplice1.el7_2.5.src.rpm	9599d58369650100473111cfe0a44dcd	ELSA-2017-3518
	openssl-1.0.1e-51.ksplice1.el7_2.5.x86_64.rpm	f45bf306277dcb489c69fe0b66986b52	ELSA-2017-3518
	openssl-devel-1.0.1e-51.ksplice1.el7_2.5.i686.rpm	a22336e4e9f94acd965ec00e45a34789	ELSA-2017-3518
	openssl-devel-1.0.1e-51.ksplice1.el7_2.5.x86_64.rpm	d251485390739b5cc50981dcaa2dc206	ELSA-2017-3518
	openssl-libs-1.0.1e-51.ksplice1.el7_2.5.i686.rpm	782502158239e6658394f2ff54189d97	ELSA-2017-3518
	openssl-libs-1.0.1e-51.ksplice1.el7_2.5.x86_64.rpm	4cde5f9ec663235cd3b567452303d6eb	ELSA-2017-3518
	openssl-perl-1.0.1e-51.ksplice1.el7_2.5.x86_64.rpm	4b1f4469e117cf3926913cbb9a6aaac8	ELSA-2017-3518
	openssl-static-1.0.1e-51.ksplice1.el7_2.5.i686.rpm	2e938e610faaaba15683683ab59efc63	ELSA-2017-3518
	openssl-static-1.0.1e-51.ksplice1.el7_2.5.x86_64.rpm	25b06697b632db3f319f81035506b1ce	ELSA-2017-3518

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team