Security Advisory Moderate: openssl security update

Advisory: RHSA-2017:0286-1
Type: Security Advisory
Severity: Moderate
Issued on: 2017-02-20
Last updated on: 2017-02-20
Affected Products: Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux Desktop (v. 7)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux HPC Node (v. 7)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Server (v. 7)
Red Hat Enterprise Linux Server TUS (v. 7.3)
Red Hat Enterprise Linux Workstation (v. 6)
Red Hat Enterprise Linux Workstation (v. 7)
CVEs (cve.mitre.org): CVE-2016-8610
CVE-2017-3731

Details

An update for openssl is now available for Red Hat Enterprise Linux 6 and Red
Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of
Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a
detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and
Transport Layer Security (TLS) protocols, as well as a full-strength
general-purpose cryptography library.

Security Fix(es):

* An integer underflow leading to an out of bounds read flaw was found in
OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit
TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite.
(CVE-2017-3731)

* A denial of service flaw was found in the way the TLS/SSL protocol defined
processing of ALERT packets during a connection handshake. A remote attacker
could use this flaw to make a TLS/SSL server consume an excessive amount of CPU
and fail to accept connections form other clients. (CVE-2016-8610)


Solution

For details on how to apply this update, which includes the changes described in
this advisory, refer to:

https://access.redhat.com/articles/11258

For the update to take effect, all services linked to the OpenSSL library must
be restarted, or the system rebooted.

Updated packages

Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
openssl-1.0.1e-48.el6_8.4.src.rpm
File outdated by:  RHBA-2017:0660
    MD5: b40cb2cc4319e391dad144abfb2257c0
SHA-256: 99c17b6a34d7af745a4f72e7ec96d16fb974e59d45a503b366c51a72e6bc48fe
 
IA-32:
openssl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 5b2a1a8e4dcc02588b93f02ca7706bda
SHA-256: 66fb81ebc928fd009475253180d897b9460c79f225d10cb1e1039260038b6a39
openssl-debuginfo-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 2e987e9b5c2d784036a98e69d5373764
SHA-256: 55c222d47f317b8843cd6a16c145441fd68e4d791e8329c3446c3376d4be59f3
openssl-devel-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: ec48ed920e0f9498bfb26949897809c8
SHA-256: 517e040c1a0d628874c1b9bf26282c6b9db092ec5ff2d7db21d3b38f0449fd82
openssl-perl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: cfe27c5d09085c56594ec87b482e4aab
SHA-256: a845d3a40f8b698ac64a451f9a4a08866a16299f0f577a180cb92234bcdef11e
openssl-static-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 847a0ca7d5f008d5bcd98f77db929686
SHA-256: 235a8461f3ede4a2bb5d100cd5d7bf31bcceb5f7cc51b72c5fef97a5dc9fb727
 
x86_64:
openssl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 5b2a1a8e4dcc02588b93f02ca7706bda
SHA-256: 66fb81ebc928fd009475253180d897b9460c79f225d10cb1e1039260038b6a39
openssl-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 7dfccf368b796da49eda56d74f41473c
SHA-256: 60dd697506390f373e2af544f4fc97a39371bd747cdc36425b6fd9959a648a97
openssl-debuginfo-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 2e987e9b5c2d784036a98e69d5373764
SHA-256: 55c222d47f317b8843cd6a16c145441fd68e4d791e8329c3446c3376d4be59f3
openssl-debuginfo-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: e0cc7ef9f94ee01c46fe83c22bbc63db
SHA-256: 5dafa63913b31291afb7d0243f9557f08bc1d4bb9b37157c2602278fec5fd126
openssl-devel-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: ec48ed920e0f9498bfb26949897809c8
SHA-256: 517e040c1a0d628874c1b9bf26282c6b9db092ec5ff2d7db21d3b38f0449fd82
openssl-devel-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 9d90651a64acf6829f08996085fc7569
SHA-256: 3fb827dbcf1c293875ca5e31ccf8124b06fabfee1e725dc8dced09b4faf65d91
openssl-perl-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 855279bae9a718fd8180efd5262e5922
SHA-256: 2c66c456a4e53ea5d218acfa7b5ecbdb9bb71192f8c90eeb00d72f66166bcf67
openssl-static-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 311a09b1ff33106538b09ba5f7cf5c04
SHA-256: b7f9cda1e0bc7356a92b9360bb8298fcc048c9160960e3a09cba74dc8874c325
 
Red Hat Enterprise Linux Desktop (v. 7)

SRPMS:
openssl-1.0.1e-60.el7_3.1.src.rpm     MD5: 444a2911a64e995fa6d48f454f4b9dfa
SHA-256: 3ecc2c50219a0f3f09997fe64e8aeba262ccd70c507d5742e225923a0563a60b
 
x86_64:
openssl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 4c1e24f3c4ec8ff485992a982a8da0e7
SHA-256: d84b63653a323d680068c4e2dca198466a83c8e8f17fc9c2450753adad7ece0b
openssl-debuginfo-1.0.1e-60.el7_3.1.i686.rpm     MD5: 5d3bd26491903f02d6a7f0533764c392
SHA-256: be277b72e516978dd4cf551b216abd8bda405a74888df25852dc8408c3b9af64
openssl-debuginfo-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 7b4e776bef3facf299b37510602e91bf
SHA-256: f33dc323b82441eef0d873daf3ab0fb084085efa446634361c6e1539133671cd
openssl-devel-1.0.1e-60.el7_3.1.i686.rpm     MD5: 54a35f4faa0e4620b198b77398bf4513
SHA-256: 3706bbe3d366ea2966b3ee6b0f1efc9cbf36b4843bb50c55ea506787dc83c31c
openssl-devel-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: eea59c4f797a509d0199b6bfb2f96d37
SHA-256: ef4419ec8ec2253fd3b513134900c9570a2da2bd23740c3ba251f87e4f2da25d
openssl-libs-1.0.1e-60.el7_3.1.i686.rpm     MD5: c4e5705a794c76c0a7ce8812d9d7c2ac
SHA-256: 499f7d7072bcc60ce615e656f836ad5fc539a36cae6691cf25b1a2f70980bd61
openssl-libs-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d213b2f9c7bf5978bd3af1f023a4dc2
SHA-256: a3f987cbd9dc52a644a96481febd1e39e634d512649a9caf427580540b95ab95
openssl-perl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d9b02ee020e36b04dc38ca1077da120
SHA-256: e5110afc1fcfcbecca31a7576cd140d537d6509c296b67fb1ac89451dbe55f27
openssl-static-1.0.1e-60.el7_3.1.i686.rpm     MD5: e0cec9fa0b75a7e186c9feeef4bb4ccc
SHA-256: f4fedfe19741a7d7bc0d1af822a63d9098c3cc85aab2b9184b7f14cbe43a9757
openssl-static-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 17b9a96087d8740498fc8f5c7293b0eb
SHA-256: 91c915cf7c87dc3817ee9ee9644d304e0b423eca028deeb8eafec8f2b5ea0199
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
openssl-1.0.1e-48.el6_8.4.src.rpm
File outdated by:  RHBA-2017:0660
    MD5: b40cb2cc4319e391dad144abfb2257c0
SHA-256: 99c17b6a34d7af745a4f72e7ec96d16fb974e59d45a503b366c51a72e6bc48fe
 
x86_64:
openssl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 5b2a1a8e4dcc02588b93f02ca7706bda
SHA-256: 66fb81ebc928fd009475253180d897b9460c79f225d10cb1e1039260038b6a39
openssl-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 7dfccf368b796da49eda56d74f41473c
SHA-256: 60dd697506390f373e2af544f4fc97a39371bd747cdc36425b6fd9959a648a97
openssl-debuginfo-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 2e987e9b5c2d784036a98e69d5373764
SHA-256: 55c222d47f317b8843cd6a16c145441fd68e4d791e8329c3446c3376d4be59f3
openssl-debuginfo-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: e0cc7ef9f94ee01c46fe83c22bbc63db
SHA-256: 5dafa63913b31291afb7d0243f9557f08bc1d4bb9b37157c2602278fec5fd126
openssl-devel-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: ec48ed920e0f9498bfb26949897809c8
SHA-256: 517e040c1a0d628874c1b9bf26282c6b9db092ec5ff2d7db21d3b38f0449fd82
openssl-devel-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 9d90651a64acf6829f08996085fc7569
SHA-256: 3fb827dbcf1c293875ca5e31ccf8124b06fabfee1e725dc8dced09b4faf65d91
openssl-perl-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 855279bae9a718fd8180efd5262e5922
SHA-256: 2c66c456a4e53ea5d218acfa7b5ecbdb9bb71192f8c90eeb00d72f66166bcf67
openssl-static-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 311a09b1ff33106538b09ba5f7cf5c04
SHA-256: b7f9cda1e0bc7356a92b9360bb8298fcc048c9160960e3a09cba74dc8874c325
 
Red Hat Enterprise Linux HPC Node (v. 7)

SRPMS:
openssl-1.0.1e-60.el7_3.1.src.rpm     MD5: 444a2911a64e995fa6d48f454f4b9dfa
SHA-256: 3ecc2c50219a0f3f09997fe64e8aeba262ccd70c507d5742e225923a0563a60b
 
x86_64:
openssl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 4c1e24f3c4ec8ff485992a982a8da0e7
SHA-256: d84b63653a323d680068c4e2dca198466a83c8e8f17fc9c2450753adad7ece0b
openssl-debuginfo-1.0.1e-60.el7_3.1.i686.rpm     MD5: 5d3bd26491903f02d6a7f0533764c392
SHA-256: be277b72e516978dd4cf551b216abd8bda405a74888df25852dc8408c3b9af64
openssl-debuginfo-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 7b4e776bef3facf299b37510602e91bf
SHA-256: f33dc323b82441eef0d873daf3ab0fb084085efa446634361c6e1539133671cd
openssl-devel-1.0.1e-60.el7_3.1.i686.rpm     MD5: 54a35f4faa0e4620b198b77398bf4513
SHA-256: 3706bbe3d366ea2966b3ee6b0f1efc9cbf36b4843bb50c55ea506787dc83c31c
openssl-devel-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: eea59c4f797a509d0199b6bfb2f96d37
SHA-256: ef4419ec8ec2253fd3b513134900c9570a2da2bd23740c3ba251f87e4f2da25d
openssl-libs-1.0.1e-60.el7_3.1.i686.rpm     MD5: c4e5705a794c76c0a7ce8812d9d7c2ac
SHA-256: 499f7d7072bcc60ce615e656f836ad5fc539a36cae6691cf25b1a2f70980bd61
openssl-libs-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d213b2f9c7bf5978bd3af1f023a4dc2
SHA-256: a3f987cbd9dc52a644a96481febd1e39e634d512649a9caf427580540b95ab95
openssl-perl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d9b02ee020e36b04dc38ca1077da120
SHA-256: e5110afc1fcfcbecca31a7576cd140d537d6509c296b67fb1ac89451dbe55f27
openssl-static-1.0.1e-60.el7_3.1.i686.rpm     MD5: e0cec9fa0b75a7e186c9feeef4bb4ccc
SHA-256: f4fedfe19741a7d7bc0d1af822a63d9098c3cc85aab2b9184b7f14cbe43a9757
openssl-static-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 17b9a96087d8740498fc8f5c7293b0eb
SHA-256: 91c915cf7c87dc3817ee9ee9644d304e0b423eca028deeb8eafec8f2b5ea0199
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
openssl-1.0.1e-48.el6_8.4.src.rpm
File outdated by:  RHBA-2017:0660
    MD5: b40cb2cc4319e391dad144abfb2257c0
SHA-256: 99c17b6a34d7af745a4f72e7ec96d16fb974e59d45a503b366c51a72e6bc48fe
 
IA-32:
openssl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 5b2a1a8e4dcc02588b93f02ca7706bda
SHA-256: 66fb81ebc928fd009475253180d897b9460c79f225d10cb1e1039260038b6a39
openssl-debuginfo-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 2e987e9b5c2d784036a98e69d5373764
SHA-256: 55c222d47f317b8843cd6a16c145441fd68e4d791e8329c3446c3376d4be59f3
openssl-devel-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: ec48ed920e0f9498bfb26949897809c8
SHA-256: 517e040c1a0d628874c1b9bf26282c6b9db092ec5ff2d7db21d3b38f0449fd82
openssl-perl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: cfe27c5d09085c56594ec87b482e4aab
SHA-256: a845d3a40f8b698ac64a451f9a4a08866a16299f0f577a180cb92234bcdef11e
openssl-static-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 847a0ca7d5f008d5bcd98f77db929686
SHA-256: 235a8461f3ede4a2bb5d100cd5d7bf31bcceb5f7cc51b72c5fef97a5dc9fb727
 
PPC:
openssl-1.0.1e-48.el6_8.4.ppc.rpm
File outdated by:  RHBA-2017:0660
    MD5: 5add0a20132e744775a84dc8d54f75b2
SHA-256: 65ee3317ec3217455a9c3ccd5d88507e0ca256bf485f39d9bfdcfcef49fc102a
openssl-1.0.1e-48.el6_8.4.ppc64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 6dc394a9dc46cb79d2b6dbb7e1c910b4
SHA-256: ef726b71cd9b8500e0d17e6c087b6012958a298d5296a971dfb246925bc03220
openssl-debuginfo-1.0.1e-48.el6_8.4.ppc.rpm
File outdated by:  RHBA-2017:0660
    MD5: b8044534dfa024e2b846bdc08414035c
SHA-256: 65097e69b042d88e0a22aaa35273d1dafc895b7d1a87a0d3491cfc672363af79
openssl-debuginfo-1.0.1e-48.el6_8.4.ppc64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 04ccb89f3b7206111abfdcb2201a1734
SHA-256: 79aec13c3c0681dee4b15a4da77bd926cb62e712a554e828dc936bd57a12a53b
openssl-devel-1.0.1e-48.el6_8.4.ppc.rpm
File outdated by:  RHBA-2017:0660
    MD5: b331c9c55dcbf6cfa829b367504ca01a
SHA-256: 2cb9492618695156efa260e55c79911e58fde370ccc5838878f224bc946b45b1
openssl-devel-1.0.1e-48.el6_8.4.ppc64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 4a5a2897e30ec91264b643b0f21f0de0
SHA-256: 7514f1fd43eb3d12a94e2e24100bb2a131171b2ba3082c9bad66e6905f81b01b
openssl-perl-1.0.1e-48.el6_8.4.ppc64.rpm
File outdated by:  RHBA-2017:0660
    MD5: b53acd89542db379e57cab7b03faa2cf
SHA-256: b8d1f2da81e29e3925823e6c2ff2b89dcb0db545c75fd2160a8cc569746809c3
openssl-static-1.0.1e-48.el6_8.4.ppc64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 3bcafbee0ea0cbb3758ba1fbd0c9482a
SHA-256: 10153e3feb9ab38385af7f430d387dc8bd3678ea4cd58dc19bc1e53cdc1a8baf
 
s390x:
openssl-1.0.1e-48.el6_8.4.s390.rpm
File outdated by:  RHBA-2017:0660
    MD5: d60800bea68dd76a44ed00f95d160a1f
SHA-256: ddc17f414c945cb4944a2ca23d7cc8f6840ca60d63c5842613620957d53deeb7
openssl-1.0.1e-48.el6_8.4.s390x.rpm
File outdated by:  RHBA-2017:0660
    MD5: 4a8b61f266e71939ac0f26bbca1dc93e
SHA-256: 4c4fae6b6a8bf48961714ad52432875e031c953bdf6debcc96b3d9e014630fba
openssl-debuginfo-1.0.1e-48.el6_8.4.s390.rpm
File outdated by:  RHBA-2017:0660
    MD5: 00aa5ea8a3a59800c2faced842cb3f5b
SHA-256: dc2dad0f465969180249448524cc3891d9c5ff8fe50608b189274e1cc06ff61c
openssl-debuginfo-1.0.1e-48.el6_8.4.s390x.rpm
File outdated by:  RHBA-2017:0660
    MD5: b9c022c5389aee8f5c588cd38263cf17
SHA-256: b5792cbf173ab9ada7749cd43f77b57448cc16f6a8d8703f5a9b57620f96dcac
openssl-devel-1.0.1e-48.el6_8.4.s390.rpm
File outdated by:  RHBA-2017:0660
    MD5: 645a6f37667e6b615bb553fed73d5e96
SHA-256: a18ef2e31dd9b1a5f373e4501e1d9874d97d7e414c9392979539c835aa6886e6
openssl-devel-1.0.1e-48.el6_8.4.s390x.rpm
File outdated by:  RHBA-2017:0660
    MD5: 40b0559e41708e003f7dfd053bb2b774
SHA-256: 67806782b7b85fc5d7dbb318334128cc9a98dc9d0dff6a6c06cf02c20aaed063
openssl-perl-1.0.1e-48.el6_8.4.s390x.rpm
File outdated by:  RHBA-2017:0660
    MD5: 1407e25c6f5461f73d1e51b451fca9ef
SHA-256: 567680dbb35df3fd35c2b51f0368df75a69e31647421baa82af0084036510668
openssl-static-1.0.1e-48.el6_8.4.s390x.rpm
File outdated by:  RHBA-2017:0660
    MD5: e44102fcf9cf7e9266e9e640a5adb622
SHA-256: 392dc2ff5e202a3a9b8144a437b7c815a054e0643a0d6409db0ef57719d985ca
 
x86_64:
openssl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 5b2a1a8e4dcc02588b93f02ca7706bda
SHA-256: 66fb81ebc928fd009475253180d897b9460c79f225d10cb1e1039260038b6a39
openssl-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 7dfccf368b796da49eda56d74f41473c
SHA-256: 60dd697506390f373e2af544f4fc97a39371bd747cdc36425b6fd9959a648a97
openssl-debuginfo-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 2e987e9b5c2d784036a98e69d5373764
SHA-256: 55c222d47f317b8843cd6a16c145441fd68e4d791e8329c3446c3376d4be59f3
openssl-debuginfo-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: e0cc7ef9f94ee01c46fe83c22bbc63db
SHA-256: 5dafa63913b31291afb7d0243f9557f08bc1d4bb9b37157c2602278fec5fd126
openssl-devel-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: ec48ed920e0f9498bfb26949897809c8
SHA-256: 517e040c1a0d628874c1b9bf26282c6b9db092ec5ff2d7db21d3b38f0449fd82
openssl-devel-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 9d90651a64acf6829f08996085fc7569
SHA-256: 3fb827dbcf1c293875ca5e31ccf8124b06fabfee1e725dc8dced09b4faf65d91
openssl-perl-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 855279bae9a718fd8180efd5262e5922
SHA-256: 2c66c456a4e53ea5d218acfa7b5ecbdb9bb71192f8c90eeb00d72f66166bcf67
openssl-static-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 311a09b1ff33106538b09ba5f7cf5c04
SHA-256: b7f9cda1e0bc7356a92b9360bb8298fcc048c9160960e3a09cba74dc8874c325
 
Red Hat Enterprise Linux Server (v. 7)

SRPMS:
openssl-1.0.1e-60.el7_3.1.src.rpm     MD5: 444a2911a64e995fa6d48f454f4b9dfa
SHA-256: 3ecc2c50219a0f3f09997fe64e8aeba262ccd70c507d5742e225923a0563a60b
 
PPC:
openssl-1.0.1e-60.el7_3.1.ppc64.rpm     MD5: d13fa30c67da501a4fbcda38bf221ff1
SHA-256: 20aae8ac3c22316ba21908923a3d0b952dcff59ed81617ea3fbf3a051c45d8db
openssl-debuginfo-1.0.1e-60.el7_3.1.ppc.rpm     MD5: ece4c12fa3575e662f5240d12f5c0c48
SHA-256: 73d99e432b59082d59e24b59a6aecbe47aee48710e07122a8ac8f78124e73b2f
openssl-debuginfo-1.0.1e-60.el7_3.1.ppc64.rpm     MD5: fa0d0bb3de78d51478f68bd5b032b6d7
SHA-256: cbd6c9d3d413936e67eb12e7d15a6d9e45a79c9a38a06bd4955c5d5c81a6d5f9
openssl-devel-1.0.1e-60.el7_3.1.ppc.rpm     MD5: b38947c8f01fab910e5219e980dcd38e
SHA-256: 16a295b61ee5d426d671ca0fd0c414ade177ef178996dd18581dae9aad2da19b
openssl-devel-1.0.1e-60.el7_3.1.ppc64.rpm     MD5: c6304fd4e617756b72d77a6b0619631a
SHA-256: 694a4fcbb3d584bf45743a4ed6bae15fb9f4a5fa3fb49ee1b4773401f75dff1a
openssl-libs-1.0.1e-60.el7_3.1.ppc.rpm     MD5: e2a62c88ba2f0602c43cdff792637bf2
SHA-256: 2c6ccf689e3cc0f44a66a97725acfdde09f57847b4a72fe641fb9c98fb1dc570
openssl-libs-1.0.1e-60.el7_3.1.ppc64.rpm     MD5: 69dc864260063ce0c146db538c3046d0
SHA-256: 0f5096ab5e6b77d346f469dfc10be815eecf60947a99e496c27920b7092f5d48
openssl-perl-1.0.1e-60.el7_3.1.ppc64.rpm     MD5: 115a3f71c2dafafb6d984311abc7391b
SHA-256: 5d752bb4a3ba34321437a20c026a62a441e969a1e7ea6aa1ccaf305d150a97db
openssl-static-1.0.1e-60.el7_3.1.ppc.rpm     MD5: b1474cf689cd6f8c9e7bc610c29491d6
SHA-256: 67c7e90cc85a349f61f4649632ff9bb3d6f6e2574532f067e4e029fcb757d7cb
openssl-static-1.0.1e-60.el7_3.1.ppc64.rpm     MD5: c577155815b6bd06b9adbb70b696b863
SHA-256: c4a7088237ee0f7ebeb2f83de7949ef4cf80a7ed88eb0c3d8fd41b8fc49cdb79
 
PPC64LE:
openssl-1.0.1e-60.el7_3.1.ppc64le.rpm     MD5: 2792c78c67a9e6c4428654beda193af0
SHA-256: 93a52d2c23067fb71621d9c7de9773d9d38c894e92b5e1cba836c8a1de7f2244
openssl-debuginfo-1.0.1e-60.el7_3.1.ppc64le.rpm     MD5: e8edc67008e42803c1a72f15dc51ed97
SHA-256: 005138c9ecd6ce36a3d39a79e8824d4281fc8dff207bea4cfbfd792f61104bf9
openssl-devel-1.0.1e-60.el7_3.1.ppc64le.rpm     MD5: 5248a94254e2c196a6df2fc44e506589
SHA-256: 5e543fffc2015f64578c441b0377c88789867948fddd0af456b3f83c3ac8ea6f
openssl-libs-1.0.1e-60.el7_3.1.ppc64le.rpm     MD5: 0b54fe52856b95ab9bcbc224c69dad3c
SHA-256: 2d6270849dfab6375922310aea760955c4228bbdce32e1cb3cbe878478f7729b
openssl-perl-1.0.1e-60.el7_3.1.ppc64le.rpm     MD5: 89e7915568b1311b51393848c5c33ff5
SHA-256: 4a80aa60fa3add970b95688905f495b09fa7867c436fc7ce1273c3324af499a9
openssl-static-1.0.1e-60.el7_3.1.ppc64le.rpm     MD5: 0407aaec17975f0ed661f3162f7308f3
SHA-256: 9949d105a2ca33e5bfb23422fb55db3d45e9986909a82823b3f9d2929d4908ee
 
s390x:
openssl-1.0.1e-60.el7_3.1.s390x.rpm     MD5: 81389206683024a8c664d92592ecd302
SHA-256: c57cba8dddcd3996f33d6116820f5bac24ecdd70e15d1ed62d27f1c468513c6a
openssl-debuginfo-1.0.1e-60.el7_3.1.s390.rpm     MD5: 1b39bc668f9c5cd64198cb593a483421
SHA-256: ec3bfcb5834a94974bbabd9551dbf83a4b5d451f67fbee724ff713c3fd75443f
openssl-debuginfo-1.0.1e-60.el7_3.1.s390x.rpm     MD5: cb5d217218969af94a5697cd79b1d56e
SHA-256: 61bdd4764080702897f365fdda5bff529760907993acb93972abb5d5049bc447
openssl-devel-1.0.1e-60.el7_3.1.s390.rpm     MD5: c92633bd7c88431fa08f767d1039091f
SHA-256: 0a2261a11259ba6724db100a73d4586801d3cd6add211e1603c70515011a776a
openssl-devel-1.0.1e-60.el7_3.1.s390x.rpm     MD5: 1382bf3437a02f7882348886d0887420
SHA-256: e15d925d9e3eb5f30cc8be7a1f8051459dadf5bd6adc3234d3ced4f92970ad62
openssl-libs-1.0.1e-60.el7_3.1.s390.rpm     MD5: d0b3417dba44c1ea9ee2928854b42716
SHA-256: b3e52a7b2fead7dfca29b837d5614c020bfac50b543347137d343958ebdcfbee
openssl-libs-1.0.1e-60.el7_3.1.s390x.rpm     MD5: bf6e09848b7a88750fbc2b1719d6a602
SHA-256: ff4b4bea2d0ea69c869c878f18633510d1441fd5638dffc935e8e1078beceedc
openssl-perl-1.0.1e-60.el7_3.1.s390x.rpm     MD5: f7018080945863368cba45a24c703df8
SHA-256: 3954d63e7a7a05e6d2a29abe5184fcf3ec4a3c751cc418733f70e0f92000a6e6
openssl-static-1.0.1e-60.el7_3.1.s390.rpm     MD5: 9425a28c3342238572aaf00a2cd7e5db
SHA-256: d3e0d73acb0112f0d8daa21ea6c66ec4482ad09d14d2f17ee981a39e5a1c75ee
openssl-static-1.0.1e-60.el7_3.1.s390x.rpm     MD5: 48f0a3e46c91f83a8f8721e6adeb6531
SHA-256: 6b34cdc2a68dc1e5192573eb10fdcad1f9b14745897042232515c5440c5e6280
 
x86_64:
openssl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 4c1e24f3c4ec8ff485992a982a8da0e7
SHA-256: d84b63653a323d680068c4e2dca198466a83c8e8f17fc9c2450753adad7ece0b
openssl-debuginfo-1.0.1e-60.el7_3.1.i686.rpm     MD5: 5d3bd26491903f02d6a7f0533764c392
SHA-256: be277b72e516978dd4cf551b216abd8bda405a74888df25852dc8408c3b9af64
openssl-debuginfo-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 7b4e776bef3facf299b37510602e91bf
SHA-256: f33dc323b82441eef0d873daf3ab0fb084085efa446634361c6e1539133671cd
openssl-devel-1.0.1e-60.el7_3.1.i686.rpm     MD5: 54a35f4faa0e4620b198b77398bf4513
SHA-256: 3706bbe3d366ea2966b3ee6b0f1efc9cbf36b4843bb50c55ea506787dc83c31c
openssl-devel-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: eea59c4f797a509d0199b6bfb2f96d37
SHA-256: ef4419ec8ec2253fd3b513134900c9570a2da2bd23740c3ba251f87e4f2da25d
openssl-libs-1.0.1e-60.el7_3.1.i686.rpm     MD5: c4e5705a794c76c0a7ce8812d9d7c2ac
SHA-256: 499f7d7072bcc60ce615e656f836ad5fc539a36cae6691cf25b1a2f70980bd61
openssl-libs-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d213b2f9c7bf5978bd3af1f023a4dc2
SHA-256: a3f987cbd9dc52a644a96481febd1e39e634d512649a9caf427580540b95ab95
openssl-perl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d9b02ee020e36b04dc38ca1077da120
SHA-256: e5110afc1fcfcbecca31a7576cd140d537d6509c296b67fb1ac89451dbe55f27
openssl-static-1.0.1e-60.el7_3.1.i686.rpm     MD5: e0cec9fa0b75a7e186c9feeef4bb4ccc
SHA-256: f4fedfe19741a7d7bc0d1af822a63d9098c3cc85aab2b9184b7f14cbe43a9757
openssl-static-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 17b9a96087d8740498fc8f5c7293b0eb
SHA-256: 91c915cf7c87dc3817ee9ee9644d304e0b423eca028deeb8eafec8f2b5ea0199
 
Red Hat Enterprise Linux Server TUS (v. 7.3)

SRPMS:
openssl-1.0.1e-60.el7_3.1.src.rpm     MD5: 444a2911a64e995fa6d48f454f4b9dfa
SHA-256: 3ecc2c50219a0f3f09997fe64e8aeba262ccd70c507d5742e225923a0563a60b
 
x86_64:
openssl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 4c1e24f3c4ec8ff485992a982a8da0e7
SHA-256: d84b63653a323d680068c4e2dca198466a83c8e8f17fc9c2450753adad7ece0b
openssl-debuginfo-1.0.1e-60.el7_3.1.i686.rpm     MD5: 5d3bd26491903f02d6a7f0533764c392
SHA-256: be277b72e516978dd4cf551b216abd8bda405a74888df25852dc8408c3b9af64
openssl-debuginfo-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 7b4e776bef3facf299b37510602e91bf
SHA-256: f33dc323b82441eef0d873daf3ab0fb084085efa446634361c6e1539133671cd
openssl-devel-1.0.1e-60.el7_3.1.i686.rpm     MD5: 54a35f4faa0e4620b198b77398bf4513
SHA-256: 3706bbe3d366ea2966b3ee6b0f1efc9cbf36b4843bb50c55ea506787dc83c31c
openssl-devel-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: eea59c4f797a509d0199b6bfb2f96d37
SHA-256: ef4419ec8ec2253fd3b513134900c9570a2da2bd23740c3ba251f87e4f2da25d
openssl-libs-1.0.1e-60.el7_3.1.i686.rpm     MD5: c4e5705a794c76c0a7ce8812d9d7c2ac
SHA-256: 499f7d7072bcc60ce615e656f836ad5fc539a36cae6691cf25b1a2f70980bd61
openssl-libs-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d213b2f9c7bf5978bd3af1f023a4dc2
SHA-256: a3f987cbd9dc52a644a96481febd1e39e634d512649a9caf427580540b95ab95
openssl-perl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d9b02ee020e36b04dc38ca1077da120
SHA-256: e5110afc1fcfcbecca31a7576cd140d537d6509c296b67fb1ac89451dbe55f27
openssl-static-1.0.1e-60.el7_3.1.i686.rpm     MD5: e0cec9fa0b75a7e186c9feeef4bb4ccc
SHA-256: f4fedfe19741a7d7bc0d1af822a63d9098c3cc85aab2b9184b7f14cbe43a9757
openssl-static-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 17b9a96087d8740498fc8f5c7293b0eb
SHA-256: 91c915cf7c87dc3817ee9ee9644d304e0b423eca028deeb8eafec8f2b5ea0199
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
openssl-1.0.1e-48.el6_8.4.src.rpm
File outdated by:  RHBA-2017:0660
    MD5: b40cb2cc4319e391dad144abfb2257c0
SHA-256: 99c17b6a34d7af745a4f72e7ec96d16fb974e59d45a503b366c51a72e6bc48fe
 
IA-32:
openssl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 5b2a1a8e4dcc02588b93f02ca7706bda
SHA-256: 66fb81ebc928fd009475253180d897b9460c79f225d10cb1e1039260038b6a39
openssl-debuginfo-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 2e987e9b5c2d784036a98e69d5373764
SHA-256: 55c222d47f317b8843cd6a16c145441fd68e4d791e8329c3446c3376d4be59f3
openssl-devel-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: ec48ed920e0f9498bfb26949897809c8
SHA-256: 517e040c1a0d628874c1b9bf26282c6b9db092ec5ff2d7db21d3b38f0449fd82
openssl-perl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: cfe27c5d09085c56594ec87b482e4aab
SHA-256: a845d3a40f8b698ac64a451f9a4a08866a16299f0f577a180cb92234bcdef11e
openssl-static-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 847a0ca7d5f008d5bcd98f77db929686
SHA-256: 235a8461f3ede4a2bb5d100cd5d7bf31bcceb5f7cc51b72c5fef97a5dc9fb727
 
x86_64:
openssl-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 5b2a1a8e4dcc02588b93f02ca7706bda
SHA-256: 66fb81ebc928fd009475253180d897b9460c79f225d10cb1e1039260038b6a39
openssl-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 7dfccf368b796da49eda56d74f41473c
SHA-256: 60dd697506390f373e2af544f4fc97a39371bd747cdc36425b6fd9959a648a97
openssl-debuginfo-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: 2e987e9b5c2d784036a98e69d5373764
SHA-256: 55c222d47f317b8843cd6a16c145441fd68e4d791e8329c3446c3376d4be59f3
openssl-debuginfo-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: e0cc7ef9f94ee01c46fe83c22bbc63db
SHA-256: 5dafa63913b31291afb7d0243f9557f08bc1d4bb9b37157c2602278fec5fd126
openssl-devel-1.0.1e-48.el6_8.4.i686.rpm
File outdated by:  RHBA-2017:0660
    MD5: ec48ed920e0f9498bfb26949897809c8
SHA-256: 517e040c1a0d628874c1b9bf26282c6b9db092ec5ff2d7db21d3b38f0449fd82
openssl-devel-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 9d90651a64acf6829f08996085fc7569
SHA-256: 3fb827dbcf1c293875ca5e31ccf8124b06fabfee1e725dc8dced09b4faf65d91
openssl-perl-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 855279bae9a718fd8180efd5262e5922
SHA-256: 2c66c456a4e53ea5d218acfa7b5ecbdb9bb71192f8c90eeb00d72f66166bcf67
openssl-static-1.0.1e-48.el6_8.4.x86_64.rpm
File outdated by:  RHBA-2017:0660
    MD5: 311a09b1ff33106538b09ba5f7cf5c04
SHA-256: b7f9cda1e0bc7356a92b9360bb8298fcc048c9160960e3a09cba74dc8874c325
 
Red Hat Enterprise Linux Workstation (v. 7)

SRPMS:
openssl-1.0.1e-60.el7_3.1.src.rpm     MD5: 444a2911a64e995fa6d48f454f4b9dfa
SHA-256: 3ecc2c50219a0f3f09997fe64e8aeba262ccd70c507d5742e225923a0563a60b
 
x86_64:
openssl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 4c1e24f3c4ec8ff485992a982a8da0e7
SHA-256: d84b63653a323d680068c4e2dca198466a83c8e8f17fc9c2450753adad7ece0b
openssl-debuginfo-1.0.1e-60.el7_3.1.i686.rpm     MD5: 5d3bd26491903f02d6a7f0533764c392
SHA-256: be277b72e516978dd4cf551b216abd8bda405a74888df25852dc8408c3b9af64
openssl-debuginfo-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 7b4e776bef3facf299b37510602e91bf
SHA-256: f33dc323b82441eef0d873daf3ab0fb084085efa446634361c6e1539133671cd
openssl-devel-1.0.1e-60.el7_3.1.i686.rpm     MD5: 54a35f4faa0e4620b198b77398bf4513
SHA-256: 3706bbe3d366ea2966b3ee6b0f1efc9cbf36b4843bb50c55ea506787dc83c31c
openssl-devel-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: eea59c4f797a509d0199b6bfb2f96d37
SHA-256: ef4419ec8ec2253fd3b513134900c9570a2da2bd23740c3ba251f87e4f2da25d
openssl-libs-1.0.1e-60.el7_3.1.i686.rpm     MD5: c4e5705a794c76c0a7ce8812d9d7c2ac
SHA-256: 499f7d7072bcc60ce615e656f836ad5fc539a36cae6691cf25b1a2f70980bd61
openssl-libs-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d213b2f9c7bf5978bd3af1f023a4dc2
SHA-256: a3f987cbd9dc52a644a96481febd1e39e634d512649a9caf427580540b95ab95
openssl-perl-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 5d9b02ee020e36b04dc38ca1077da120
SHA-256: e5110afc1fcfcbecca31a7576cd140d537d6509c296b67fb1ac89451dbe55f27
openssl-static-1.0.1e-60.el7_3.1.i686.rpm     MD5: e0cec9fa0b75a7e186c9feeef4bb4ccc
SHA-256: f4fedfe19741a7d7bc0d1af822a63d9098c3cc85aab2b9184b7f14cbe43a9757
openssl-static-1.0.1e-60.el7_3.1.x86_64.rpm     MD5: 17b9a96087d8740498fc8f5c7293b0eb
SHA-256: 91c915cf7c87dc3817ee9ee9644d304e0b423eca028deeb8eafec8f2b5ea0199
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

1384743 - CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
1416852 - CVE-2017-3731 openssl: Truncated packet could crash via OOB read


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/