[Oraclevm-errata] OVMSA-2016-0031 Important: Oracle VM 3.3 openssl security update
Errata Announcements for Oracle VM
oraclevm-errata at oss.oracle.com
Tue Mar 1 15:54:08 PST 2016
Oracle VM Security Advisory OVMSA-2016-0031
The following updated rpms for Oracle VM 3.3 have been uploaded to the
Unbreakable Linux Network:
x86_64:
openssl-1.0.1e-42.el6_7.4.x86_64.rpm
SRPMS:
http://oss.oracle.com/oraclevm/server/3.3/SRPMS-updates/openssl-1.0.1e-42.el6_7.4.src.rpm
Description of changes:
[1.0.1e-42.4]
- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn
[1.0.1e-42.3]
- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method
More information about the Oraclevm-errata
mailing list