[El-errata] ELSA-2010-0977 Moderate: Oracle Linux 4 openssl security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Mon Dec 13 17:39:19 PST 2010


Oracle Linux Security Advisory ELSA-2010-0977

https://rhn.redhat.com/errata/RHSA-2010-0977.html

The following updated rpms for Oracle Linux 4 have been uploaded to the 
Unbreakable Linux Network:

i386:
openssl-0.9.7a-43.17.el4_8.6.i386.rpm
openssl-0.9.7a-43.17.el4_8.6.i686.rpm
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm
openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm

x86_64:
openssl-0.9.7a-43.17.el4_8.6.i686.rpm
openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm
openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm
openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm

ia64:
openssl-0.9.7a-43.17.el4_8.6.i686.rpm
openssl-0.9.7a-43.17.el4_8.6.ia64.rpm
openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm
openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/openssl-0.9.7a-43.17.el4_8.6.src.rpm


Description of changes:


[0.9.7a-43.17.6]
- CVE-2010-4180 - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
  (#659462)
- CVE-2009-3245 - fix missing checks on allocation failure in
  bn_wexpand (#570924)




More information about the El-errata mailing list