[El-errata] ELSA-2010-0977 Moderate: Oracle Linux 4 openssl security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Mon Dec 13 17:39:19 PST 2010
Oracle Linux Security Advisory ELSA-2010-0977
https://rhn.redhat.com/errata/RHSA-2010-0977.html
The following updated rpms for Oracle Linux 4 have been uploaded to the
Unbreakable Linux Network:
i386:
openssl-0.9.7a-43.17.el4_8.6.i386.rpm
openssl-0.9.7a-43.17.el4_8.6.i686.rpm
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm
openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm
x86_64:
openssl-0.9.7a-43.17.el4_8.6.i686.rpm
openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm
openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm
openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm
ia64:
openssl-0.9.7a-43.17.el4_8.6.i686.rpm
openssl-0.9.7a-43.17.el4_8.6.ia64.rpm
openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm
openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm
SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/openssl-0.9.7a-43.17.el4_8.6.src.rpm
Description of changes:
[0.9.7a-43.17.6]
- CVE-2010-4180 - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
(#659462)
- CVE-2009-3245 - fix missing checks on allocation failure in
bn_wexpand (#570924)
More information about the El-errata
mailing list