[El-errata] ELSA-2010-0162 Important: Enterprise Linux 5 openssl security update

[Errata Announcements for Enterprise Linux]

Enterprise Linux Security Advisory ELSA-2010-0162

https://rhn.redhat.com/errata/RHSA-2010-0162.html

The following updated rpms for Enterprise Linux 5 have been uploaded to 
the Unbreakable Linux Network:

i386:
openssl-0.9.8e-12.el5_4.6.i386.rpm
openssl-0.9.8e-12.el5_4.6.i686.rpm
openssl-devel-0.9.8e-12.el5_4.6.i386.rpm
openssl-perl-0.9.8e-12.el5_4.6.i386.rpm

x86_64:
openssl-0.9.8e-12.el5_4.6.i686.rpm
openssl-0.9.8e-12.el5_4.6.x86_64.rpm
openssl-devel-0.9.8e-12.el5_4.6.i386.rpm
openssl-devel-0.9.8e-12.el5_4.6.x86_64.rpm
openssl-perl-0.9.8e-12.el5_4.6.x86_64.rpm

ia64:
openssl-0.9.8e-12.el5_4.6.i686.rpm
openssl-0.9.8e-12.el5_4.6.ia64.rpm
openssl-devel-0.9.8e-12.el5_4.6.ia64.rpm
openssl-perl-0.9.8e-12.el5_4.6.ia64.rpm

SRPMS:
http://oss.oracle.com/el5/SRPMS-updates/openssl-0.9.8e-12.el5_4.6.src.rpm

Description of changes:

[0.9.8e-12.6]
- fix CVE-2009-3245 - add missing bn_wexpand return checks (#570924)

[0.9.8e-12.5]
- fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
  in the RHEL-5 and newer versions will crash in such case (#569774)

[0.9.8e-12.4]
- do not disable SSLv2 in the renegotiation patch - SSLv2 does
  not support renegotiation
- allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT

[0.9.8e-12.3]
- mention the RFC5746 in the CVE-2009-3555 doc

[0.9.8e-12.2]
- fix CVE-2009-3555 - support the safe renegotiation extension and
  do not allow legacy renegotiation on the server by default (#533125)