[Oraclevm-errata] OVMSA-2016-0031 Important: Oracle VM 3.3 openssl security update

[Errata Announcements for Oracle VM]

Oracle VM Security Advisory OVMSA-2016-0031

The following updated rpms for Oracle VM 3.3 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
openssl-1.0.1e-42.el6_7.4.x86_64.rpm


SRPMS:
http://oss.oracle.com/oraclevm/server/3.3/SRPMS-updates/openssl-1.0.1e-42.el6_7.4.src.rpm



Description of changes:

[1.0.1e-42.4]
- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn

[1.0.1e-42.3]
- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method