Lucene search

K
oraclelinuxOracleLinuxELSA-2018-3221
HistoryNov 05, 2018 - 12:00 a.m.

openssl security, bug fix, and enhancement update

2018-11-0500:00:00
linux.oracle.com
487

0.042 Low

EPSS

Percentile

92.3%

[1.0.2k-16.0.1]

  • sha256 is used for the RSA pairwise consistency test instead of sha1
    [1.0.2k-16]
  • fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
  • fix incorrect error message on FIPS DSA parameter generation (#1603597)
    [1.0.2k-14]
  • ppc64le is not multilib architecture (#1585004)
    [1.0.2k-13]
  • add S390x assembler updates
  • make CA name list comparison function case sensitive (#1548401)
  • fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
  • fix CVE-2018-0732 - large prime DH DoS of TLS client
  • fix CVE-2018-0737 - RSA key generation cache timing vulnerability
  • fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure