Synopsis: Moderate: openssl security and bug fix update
Advisory ID: SLSA-2018:0998-1
Issue Date: 2018-04-10
CVE Numbers: CVE-2017-3736
CVE-2017-3737
CVE-2017-3738
—
Security Fix(es):
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* openssl: Read/write after SSL object in error state (CVE-2017-3737)
* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
Additional Changes:
—
SL7
x86_64
openssl-1.0.2k-12.el7.x86_64.rpm
openssl-debuginfo-1.0.2k-12.el7.i686.rpm
openssl-debuginfo-1.0.2k-12.el7.x86_64.rpm
openssl-libs-1.0.2k-12.el7.i686.rpm
openssl-libs-1.0.2k-12.el7.x86_64.rpm
openssl-devel-1.0.2k-12.el7.i686.rpm
openssl-devel-1.0.2k-12.el7.x86_64.rpm
openssl-perl-1.0.2k-12.el7.x86_64.rpm
openssl-static-1.0.2k-12.el7.i686.rpm
openssl-static-1.0.2k-12.el7.x86_64.rpm
– Scientific Linux Development Team
