system environment/libraries

Jump to letter: [ ABCDEFGHIJKLMNOPQRSTUVWXY ]

openssl - The OpenSSL toolkit

Website: http://www.openssl.org/
License: BSDish
Vendor: Scientific Linux
Description:
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.

Packages

openssl-0.9.8e-40.el5_11.i386 [1.7 MiB] Changelog by Tomas Mraz (2016-05-17): 
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
openssl-0.9.8e-40.el5_11.i686 [1.7 MiB] Changelog by Tomas Mraz (2016-05-17): 
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
openssl-0.9.8e-39.el5_11.i386 [1.7 MiB] Changelog by Tomas Mraz (2016-02-25): 
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn
openssl-0.9.8e-39.el5_11.i686 [1.7 MiB] Changelog by Tomas Mraz (2016-02-25): 
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn
openssl-0.9.8e-37.el5_11.i686 [1.7 MiB] Changelog by Tomas Mraz (2015-12-04): 
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
openssl-0.9.8e-37.el5_11.i386 [1.7 MiB] Changelog by Tomas Mraz (2015-12-04): 
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
openssl-0.9.8e-36.el5_11.i386 [1.7 MiB] Changelog by Tomas Mraz (2015-06-25): 
- also change the default DH parameters in s_server to 1024 bits
openssl-0.9.8e-36.el5_11.i686 [1.7 MiB] Changelog by Tomas Mraz (2015-06-25): 
- also change the default DH parameters in s_server to 1024 bits
openssl-0.9.8e-33.el5_11.i386 [1.5 MiB] Changelog by Tomas Mraz (2015-04-02): 
- fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
  certificate fingerprint issues
- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
  ciphersuites and on server
- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
- fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
- fix CVE-2015-0292 - integer underflow in base64 decoder
- fix CVE-2015-0293 - triggerable assert in SSLv2 server
openssl-0.9.8e-33.el5_11.i686 [1.5 MiB] Changelog by Tomas Mraz (2015-04-02): 
- fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
  certificate fingerprint issues
- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
  ciphersuites and on server
- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
- fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
- fix CVE-2015-0292 - integer underflow in base64 decoder
- fix CVE-2015-0293 - triggerable assert in SSLv2 server
openssl-0.9.8e-31.el5_11.i386 [1.5 MiB] Changelog by Tomas Mraz (2014-10-15): 
- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)
openssl-0.9.8e-31.el5_11.i686 [1.5 MiB] Changelog by Tomas Mraz (2014-10-15): 
- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)
openssl-0.9.8e-27.el5_10.4.i386 [1.5 MiB] Changelog by Tomas Mraz (2014-08-08): 
- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
openssl-0.9.8e-27.el5_10.4.i686 [1.5 MiB] Changelog by Tomas Mraz (2014-08-08): 
- fix CVE-2014-0221 - recursion in DTLS code leading to DoS
- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
openssl-0.9.8e-27.el5_10.3.i386 [1.5 MiB] Changelog by Tomas Mraz (2014-06-03): 
- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability
openssl-0.9.8e-27.el5_10.3.i686 [1.5 MiB] Changelog by Tomas Mraz (2014-06-03): 
- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability
openssl-0.9.8e-26.el5_9.1.i686 [1.5 MiB] Changelog by Tomas Mraz (2013-02-25): 
- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)
openssl-0.9.8e-26.el5_9.1.i386 [1.5 MiB] Changelog by Tomas Mraz (2013-02-25): 
- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use __secure_getenv() everywhere instead of getenv() (#839735)
openssl-0.9.8e-22.el5_8.4.i386 [1.5 MiB] Changelog by Tomas Mraz (2012-05-15): 
- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
openssl-0.9.8e-22.el5_8.4.i686 [1.5 MiB] Changelog by Tomas Mraz (2012-05-15): 
- fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
openssl-0.9.8e-22.el5_8.3.i386 [1.5 MiB] Changelog by Tomas Mraz (2012-04-23): 
- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)
openssl-0.9.8e-22.el5_8.3.i686 [1.5 MiB] Changelog by Tomas Mraz (2012-04-23): 
- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)
openssl-0.9.8e-22.el5_8.1.i386 [1.5 MiB] Changelog by Tomas Mraz (2012-03-19): 
- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)
openssl-0.9.8e-22.el5_8.1.i686 [1.5 MiB] Changelog by Tomas Mraz (2012-03-19): 
- fix problem with the SGC restart patch that might terminate handshake
  incorrectly
- fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
- fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)
openssl-0.9.8e-20.el5_7.1.i386 [1.5 MiB] Changelog by Tomas Mraz (2012-01-18): 
- fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)
openssl-0.9.8e-20.el5_7.1.i686 [1.4 MiB] Changelog by Tomas Mraz (2012-01-18): 
- fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
  vulnerability and additional DTLS fixes (#771770)
- fix for CVE-2011-4109 - double free in policy checks (#771771)
- fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
- fix for CVE-2011-4619 - SGC restart DoS attack (#771780)
openssl-0.9.8e-12.el5_5.7.i386 [1.4 MiB] Changelog by Tomas Mraz (2010-12-07): 
- fix CVE-2010-4180 - completely disable code for
  SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)
openssl-0.9.8e-12.el5_5.7.i686 [1.4 MiB] Changelog by Tomas Mraz (2010-12-07): 
- fix CVE-2010-4180 - completely disable code for
  SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)

Listing created by Repoview-0.6.6-1.el6