[El-errata] ELSA-2016-3576 Important: Oracle Linux 5 openssl security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Jun 21 16:56:02 PDT 2016
Oracle Linux Security Advisory ELSA-2016-3576
http://linux.oracle.com/errata/ELSA-2016-3576.html
The following updated rpms for Oracle Linux 5 have been uploaded to the
Unbreakable Linux Network:
i386:
openssl-0.9.8e-40.0.2.el5_11.i386.rpm
openssl-0.9.8e-40.0.2.el5_11.i686.rpm
openssl-devel-0.9.8e-40.0.2.el5_11.i386.rpm
openssl-perl-0.9.8e-40.0.2.el5_11.i386.rpm
x86_64:
openssl-0.9.8e-40.0.2.el5_11.i686.rpm
openssl-0.9.8e-40.0.2.el5_11.x86_64.rpm
openssl-devel-0.9.8e-40.0.2.el5_11.i386.rpm
openssl-devel-0.9.8e-40.0.2.el5_11.x86_64.rpm
openssl-perl-0.9.8e-40.0.2.el5_11.x86_64.rpm
ia64:
openssl-0.9.8e-40.0.2.el5_11.i686.rpm
openssl-0.9.8e-40.0.2.el5_11.ia64.rpm
openssl-devel-0.9.8e-40.0.2.el5_11.ia64.rpm
openssl-perl-0.9.8e-40.0.2.el5_11.ia64.rpm
SRPMS:
http://oss.oracle.com/ol5/SRPMS-updates/openssl-0.9.8e-40.0.2.el5_11.src.rpm
Description of changes:
[0.9.8e-40.0.2]
- CVE-2016-0799 - Fix memory issues in BIO_*printf functions
- CVE-2016-2105 - Avoid overflow in EVP_EncodeUpdate
- CVE-2016-2106 - Fix encrypt overflow
- CVE-2016-2109 - Harden ASN.1 BIO handling of large amounts of data.
More information about the El-errata
mailing list