ELSA-2016-3627

ELSA-2016-3627 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2016-10-13

Description

[0.9.8e-40.0.3]
- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
112 bit effective strength

Related CVEs

CVE-2016-2177

CVE-2016-2178

CVE-2016-6306

CVE-2016-2182

CVE-2016-2183

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	openssl-0.9.8e-40.0.3.el5_11.src.rpm	31604d3b5382e6d1497ec932ae229b05dc6a91236e0277c78c114fe8fe8f7878	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-40.0.3.el5_11.src.rpm	31604d3b5382e6d1497ec932ae229b05dc6a91236e0277c78c114fe8fe8f7878	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-0.9.8e-40.0.3.el5_11.i386.rpm	2bf70aaed74dfcd1c19d38276f8e590f2058a13fe9f08d2fcac6915d4334e074	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-40.0.3.el5_11.i386.rpm	2bf70aaed74dfcd1c19d38276f8e590f2058a13fe9f08d2fcac6915d4334e074	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-0.9.8e-40.0.3.el5_11.i686.rpm	021eaff24710fb54225e08bda1747da6240bad773f529e9ad4db180d9b849da1	ELEA-2017-1391	ol5_i386_latest
	openssl-0.9.8e-40.0.3.el5_11.i686.rpm	021eaff24710fb54225e08bda1747da6240bad773f529e9ad4db180d9b849da1	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-devel-0.9.8e-40.0.3.el5_11.i386.rpm	8b890a5d66eca52657f732aa28c790e0480e46191e7237d572b49931c691cdd0	ELEA-2017-1391	ol5_i386_latest
	openssl-devel-0.9.8e-40.0.3.el5_11.i386.rpm	8b890a5d66eca52657f732aa28c790e0480e46191e7237d572b49931c691cdd0	ELEA-2017-1391	ol5_u11_i386_patch
	openssl-perl-0.9.8e-40.0.3.el5_11.i386.rpm	f5967bd6f3fe7c01158ee82ab8f1010d7c9bbc27d36d9c4465d05efd6fffa578	ELEA-2017-1391	ol5_i386_latest
	openssl-perl-0.9.8e-40.0.3.el5_11.i386.rpm	f5967bd6f3fe7c01158ee82ab8f1010d7c9bbc27d36d9c4465d05efd6fffa578	ELEA-2017-1391	ol5_u11_i386_patch
Oracle Linux 5 (ia64)	openssl-0.9.8e-40.0.3.el5_11.src.rpm	31604d3b5382e6d1497ec932ae229b05dc6a91236e0277c78c114fe8fe8f7878	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-40.0.3.el5_11.src.rpm	31604d3b5382e6d1497ec932ae229b05dc6a91236e0277c78c114fe8fe8f7878	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-0.9.8e-40.0.3.el5_11.i686.rpm	021eaff24710fb54225e08bda1747da6240bad773f529e9ad4db180d9b849da1	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-40.0.3.el5_11.i686.rpm	021eaff24710fb54225e08bda1747da6240bad773f529e9ad4db180d9b849da1	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-0.9.8e-40.0.3.el5_11.ia64.rpm	0853ddb37de83437c2315b2236288a4c8231a54dc32fb45f80296aaacae57b45	ELEA-2017-1391	ol5_ia64_latest
	openssl-0.9.8e-40.0.3.el5_11.ia64.rpm	0853ddb37de83437c2315b2236288a4c8231a54dc32fb45f80296aaacae57b45	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-devel-0.9.8e-40.0.3.el5_11.ia64.rpm	57876b18b53ef18cef41057c6edb47eb2de9afa3463c190975c10169239aaa5b	ELEA-2017-1391	ol5_ia64_latest
	openssl-devel-0.9.8e-40.0.3.el5_11.ia64.rpm	57876b18b53ef18cef41057c6edb47eb2de9afa3463c190975c10169239aaa5b	ELEA-2017-1391	ol5_u11_ia64_patch
	openssl-perl-0.9.8e-40.0.3.el5_11.ia64.rpm	10a31598e464ed51e86d334558d475de56b881a66bd4a1ea0f94c7158fe92bdf	ELEA-2017-1391	ol5_ia64_latest
	openssl-perl-0.9.8e-40.0.3.el5_11.ia64.rpm	10a31598e464ed51e86d334558d475de56b881a66bd4a1ea0f94c7158fe92bdf	ELEA-2017-1391	ol5_u11_ia64_patch
Oracle Linux 5 (x86_64)	openssl-0.9.8e-40.0.3.el5_11.src.rpm	31604d3b5382e6d1497ec932ae229b05dc6a91236e0277c78c114fe8fe8f7878	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-40.0.3.el5_11.src.rpm	31604d3b5382e6d1497ec932ae229b05dc6a91236e0277c78c114fe8fe8f7878	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-40.0.3.el5_11.i686.rpm	021eaff24710fb54225e08bda1747da6240bad773f529e9ad4db180d9b849da1	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-40.0.3.el5_11.i686.rpm	021eaff24710fb54225e08bda1747da6240bad773f529e9ad4db180d9b849da1	ELEA-2017-1391	ol5_x86_64_latest
	openssl-0.9.8e-40.0.3.el5_11.x86_64.rpm	5193a6a5e299a8e97ef2b2c9b62ead77c66c7f8c3d10fdc07ed0908f1b2c69ea	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-0.9.8e-40.0.3.el5_11.x86_64.rpm	5193a6a5e299a8e97ef2b2c9b62ead77c66c7f8c3d10fdc07ed0908f1b2c69ea	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-40.0.3.el5_11.i386.rpm	8b890a5d66eca52657f732aa28c790e0480e46191e7237d572b49931c691cdd0	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-devel-0.9.8e-40.0.3.el5_11.i386.rpm	8b890a5d66eca52657f732aa28c790e0480e46191e7237d572b49931c691cdd0	ELEA-2017-1391	ol5_x86_64_latest
	openssl-devel-0.9.8e-40.0.3.el5_11.x86_64.rpm	e3c5b643fe914da53bfab6a25a2fa686c9c4a6def6fe189c99a8489cbc14e295	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-devel-0.9.8e-40.0.3.el5_11.x86_64.rpm	e3c5b643fe914da53bfab6a25a2fa686c9c4a6def6fe189c99a8489cbc14e295	ELEA-2017-1391	ol5_x86_64_latest
	openssl-perl-0.9.8e-40.0.3.el5_11.x86_64.rpm	4e35b6cca233edb3a81d313fc71daac13a42c9e04b7c76f19cd773ab667b1d6d	ELEA-2017-1391	ol5_u11_x86_64_patch
	openssl-perl-0.9.8e-40.0.3.el5_11.x86_64.rpm	4e35b6cca233edb3a81d313fc71daac13a42c9e04b7c76f19cd773ab667b1d6d	ELEA-2017-1391	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team