[El-errata] ELSA-2016-3576 Important: Oracle Linux 5 openssl security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Tue Jun 21 16:56:02 PDT 2016


Oracle Linux Security Advisory ELSA-2016-3576

http://linux.oracle.com/errata/ELSA-2016-3576.html

The following updated rpms for Oracle Linux 5 have been uploaded to the 
Unbreakable Linux Network:

i386:
openssl-0.9.8e-40.0.2.el5_11.i386.rpm
openssl-0.9.8e-40.0.2.el5_11.i686.rpm
openssl-devel-0.9.8e-40.0.2.el5_11.i386.rpm
openssl-perl-0.9.8e-40.0.2.el5_11.i386.rpm

x86_64:
openssl-0.9.8e-40.0.2.el5_11.i686.rpm
openssl-0.9.8e-40.0.2.el5_11.x86_64.rpm
openssl-devel-0.9.8e-40.0.2.el5_11.i386.rpm
openssl-devel-0.9.8e-40.0.2.el5_11.x86_64.rpm
openssl-perl-0.9.8e-40.0.2.el5_11.x86_64.rpm

ia64:
openssl-0.9.8e-40.0.2.el5_11.i686.rpm
openssl-0.9.8e-40.0.2.el5_11.ia64.rpm
openssl-devel-0.9.8e-40.0.2.el5_11.ia64.rpm
openssl-perl-0.9.8e-40.0.2.el5_11.ia64.rpm


SRPMS:
http://oss.oracle.com/ol5/SRPMS-updates/openssl-0.9.8e-40.0.2.el5_11.src.rpm



Description of changes:

[0.9.8e-40.0.2]
- CVE-2016-0799 - Fix memory issues in BIO_*printf functions
- CVE-2016-2105 - Avoid overflow in EVP_EncodeUpdate
- CVE-2016-2106 - Fix encrypt overflow
- CVE-2016-2109 - Harden ASN.1 BIO handling of large amounts of data.





More information about the El-errata mailing list