- Issued:
- 2015-01-12
- Updated:
- 2015-01-12
RHBA-2015:0026 - Bug Fix Advisory
Synopsis
openssl bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated openssl packages that fix one bug are now available for Red Hat
Enterprise Linux 5.
Description
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and
Transport Layer Security (TLS) protocols, as well as a full-strength
general-purpose cryptography library.
This update fixes the following bug:
- Prior to this update, the certificate store access in the OpenSSL library was
not properly locked against simultaneous accesses in multithreaded applications.
As a consequence, the httpd daemon running in multithreaded mode could break the
https service when two threads accessed the certificate store simultaneously.
With this update, the certificate store access in OpenSSL is now locked
properly, and the httpd daemon providing the https service can now properly work
in the described situation. (BZ#1168938)
Users of openssl are advised to upgrade to these updated packages, which fix
this bug. For the update to take effect, all services linked to the OpenSSL
library must be restarted, or the system rebooted.
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
Affected Products
- Red Hat Enterprise Linux Server 5 x86_64
- Red Hat Enterprise Linux Server 5 ia64
- Red Hat Enterprise Linux Server 5 i386
- Red Hat Enterprise Linux Workstation 5 x86_64
- Red Hat Enterprise Linux Workstation 5 i386
- Red Hat Enterprise Linux Desktop 5 x86_64
- Red Hat Enterprise Linux Desktop 5 i386
- Red Hat Enterprise Linux for IBM z Systems 5 s390x
- Red Hat Enterprise Linux for Power, big endian 5 ppc
- Red Hat Enterprise Linux Server from RHUI 5 x86_64
- Red Hat Enterprise Linux Server from RHUI 5 i386
Fixes
- BZ - 1168938 - X509_STORE_get_by_subject() and thus also SSL_Accept() are not thread safe
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 5
SRPM | |
---|---|
openssl-0.9.8e-32.el5_11.src.rpm | SHA-256: 1fe827dbe0e8d2c7c035904b661a6b1a8c22965442e561824f907b69ebdbc53e |
x86_64 | |
openssl-0.9.8e-32.el5_11.i686.rpm | SHA-256: 925442e513f0ee1b84ae5e6370f99008e8b2b61717025a859323b15bb1db2eb6 |
openssl-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: bc1c66bc2c9a39bb8c24ccc95cfee7b86660e01662a43d867840909e7e10601f |
openssl-debuginfo-0.9.8e-32.el5_11.i386.rpm | SHA-256: 5d493431840667f45fd6b5904c31095ca594c1c7320b8f9317ecbe03f9c8956c |
openssl-debuginfo-0.9.8e-32.el5_11.i686.rpm | SHA-256: 859eb11c5f308a4aa0d5e8700e743147a81effdbcb0689b2b514c67e6acf257b |
openssl-debuginfo-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: 53062605087f3e8673dc28c3a7eb6b85fdf039b8ac4e48616d1508b79e298176 |
openssl-devel-0.9.8e-32.el5_11.i386.rpm | SHA-256: 79ab9c9024c86ba05b5c6347c784cfa7e93d2e470b7ee99e6d676728b0c5aa0b |
openssl-devel-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: 0a9f738c31af47fe6dd09df15a59f39a06073f8eb5eb464dafce317d45887bf7 |
openssl-perl-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: eaf6be16a5d78c54ef3572b661d4eb803eec72ec71573277a3c4d3f1c769567d |
ia64 | |
openssl-0.9.8e-32.el5_11.i686.rpm | SHA-256: 925442e513f0ee1b84ae5e6370f99008e8b2b61717025a859323b15bb1db2eb6 |
openssl-0.9.8e-32.el5_11.ia64.rpm | SHA-256: 12e3063a7e25bb344804c23feb697249bb09a7efee412b112c62c66d3b717cd8 |
openssl-debuginfo-0.9.8e-32.el5_11.i686.rpm | SHA-256: 859eb11c5f308a4aa0d5e8700e743147a81effdbcb0689b2b514c67e6acf257b |
openssl-debuginfo-0.9.8e-32.el5_11.ia64.rpm | SHA-256: 3d720acd1cfb7d84307c138c4d92d3bc64327bb13652dee7c02e48061fd87e5d |
openssl-devel-0.9.8e-32.el5_11.ia64.rpm | SHA-256: 8dddb7602801deeee792bee1c95fc6539c0ebb94aceb87b339fb785e26b87198 |
openssl-perl-0.9.8e-32.el5_11.ia64.rpm | SHA-256: 530ca54de7cadb58e0a067a23c4c7b45fa7409b29eddaf709efa6593c8abd104 |
i386 | |
openssl-0.9.8e-32.el5_11.i386.rpm | SHA-256: d987a9b8e46794113210ac9f1d5c6c47a49e298c24c63c5f6efe5118148c603d |
openssl-0.9.8e-32.el5_11.i686.rpm | SHA-256: 925442e513f0ee1b84ae5e6370f99008e8b2b61717025a859323b15bb1db2eb6 |
openssl-debuginfo-0.9.8e-32.el5_11.i386.rpm | SHA-256: 5d493431840667f45fd6b5904c31095ca594c1c7320b8f9317ecbe03f9c8956c |
openssl-debuginfo-0.9.8e-32.el5_11.i686.rpm | SHA-256: 859eb11c5f308a4aa0d5e8700e743147a81effdbcb0689b2b514c67e6acf257b |
openssl-devel-0.9.8e-32.el5_11.i386.rpm | SHA-256: 79ab9c9024c86ba05b5c6347c784cfa7e93d2e470b7ee99e6d676728b0c5aa0b |
openssl-perl-0.9.8e-32.el5_11.i386.rpm | SHA-256: 2604d06e8ac36e828cdcbdb8d4c901fb62e8ec3b63a92161075dc6cc0ecd34b4 |
Red Hat Enterprise Linux Workstation 5
SRPM | |
---|---|
openssl-0.9.8e-32.el5_11.src.rpm | SHA-256: 1fe827dbe0e8d2c7c035904b661a6b1a8c22965442e561824f907b69ebdbc53e |
x86_64 | |
openssl-0.9.8e-32.el5_11.i686.rpm | SHA-256: 925442e513f0ee1b84ae5e6370f99008e8b2b61717025a859323b15bb1db2eb6 |
openssl-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: bc1c66bc2c9a39bb8c24ccc95cfee7b86660e01662a43d867840909e7e10601f |
openssl-debuginfo-0.9.8e-32.el5_11.i386.rpm | SHA-256: 5d493431840667f45fd6b5904c31095ca594c1c7320b8f9317ecbe03f9c8956c |
openssl-debuginfo-0.9.8e-32.el5_11.i686.rpm | SHA-256: 859eb11c5f308a4aa0d5e8700e743147a81effdbcb0689b2b514c67e6acf257b |
openssl-debuginfo-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: 53062605087f3e8673dc28c3a7eb6b85fdf039b8ac4e48616d1508b79e298176 |
openssl-debuginfo-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: 53062605087f3e8673dc28c3a7eb6b85fdf039b8ac4e48616d1508b79e298176 |
openssl-devel-0.9.8e-32.el5_11.i386.rpm | SHA-256: 79ab9c9024c86ba05b5c6347c784cfa7e93d2e470b7ee99e6d676728b0c5aa0b |
openssl-devel-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: 0a9f738c31af47fe6dd09df15a59f39a06073f8eb5eb464dafce317d45887bf7 |
openssl-perl-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: eaf6be16a5d78c54ef3572b661d4eb803eec72ec71573277a3c4d3f1c769567d |
i386 | |
openssl-0.9.8e-32.el5_11.i386.rpm | SHA-256: d987a9b8e46794113210ac9f1d5c6c47a49e298c24c63c5f6efe5118148c603d |
openssl-0.9.8e-32.el5_11.i686.rpm | SHA-256: 925442e513f0ee1b84ae5e6370f99008e8b2b61717025a859323b15bb1db2eb6 |
openssl-debuginfo-0.9.8e-32.el5_11.i386.rpm | SHA-256: 5d493431840667f45fd6b5904c31095ca594c1c7320b8f9317ecbe03f9c8956c |
openssl-debuginfo-0.9.8e-32.el5_11.i386.rpm | SHA-256: 5d493431840667f45fd6b5904c31095ca594c1c7320b8f9317ecbe03f9c8956c |
openssl-debuginfo-0.9.8e-32.el5_11.i686.rpm | SHA-256: 859eb11c5f308a4aa0d5e8700e743147a81effdbcb0689b2b514c67e6acf257b |
openssl-devel-0.9.8e-32.el5_11.i386.rpm | SHA-256: 79ab9c9024c86ba05b5c6347c784cfa7e93d2e470b7ee99e6d676728b0c5aa0b |
openssl-perl-0.9.8e-32.el5_11.i386.rpm | SHA-256: 2604d06e8ac36e828cdcbdb8d4c901fb62e8ec3b63a92161075dc6cc0ecd34b4 |
Red Hat Enterprise Linux Desktop 5
SRPM | |
---|---|
openssl-0.9.8e-32.el5_11.src.rpm | SHA-256: 1fe827dbe0e8d2c7c035904b661a6b1a8c22965442e561824f907b69ebdbc53e |
x86_64 | |
openssl-0.9.8e-32.el5_11.i686.rpm | SHA-256: 925442e513f0ee1b84ae5e6370f99008e8b2b61717025a859323b15bb1db2eb6 |
openssl-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: bc1c66bc2c9a39bb8c24ccc95cfee7b86660e01662a43d867840909e7e10601f |
openssl-debuginfo-0.9.8e-32.el5_11.i686.rpm | SHA-256: 859eb11c5f308a4aa0d5e8700e743147a81effdbcb0689b2b514c67e6acf257b |
openssl-debuginfo-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: 53062605087f3e8673dc28c3a7eb6b85fdf039b8ac4e48616d1508b79e298176 |
openssl-perl-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: eaf6be16a5d78c54ef3572b661d4eb803eec72ec71573277a3c4d3f1c769567d |
i386 | |
openssl-0.9.8e-32.el5_11.i386.rpm | SHA-256: d987a9b8e46794113210ac9f1d5c6c47a49e298c24c63c5f6efe5118148c603d |
openssl-0.9.8e-32.el5_11.i686.rpm | SHA-256: 925442e513f0ee1b84ae5e6370f99008e8b2b61717025a859323b15bb1db2eb6 |
openssl-debuginfo-0.9.8e-32.el5_11.i386.rpm | SHA-256: 5d493431840667f45fd6b5904c31095ca594c1c7320b8f9317ecbe03f9c8956c |
openssl-debuginfo-0.9.8e-32.el5_11.i686.rpm | SHA-256: 859eb11c5f308a4aa0d5e8700e743147a81effdbcb0689b2b514c67e6acf257b |
openssl-perl-0.9.8e-32.el5_11.i386.rpm | SHA-256: 2604d06e8ac36e828cdcbdb8d4c901fb62e8ec3b63a92161075dc6cc0ecd34b4 |
Red Hat Enterprise Linux for IBM z Systems 5
SRPM | |
---|---|
openssl-0.9.8e-32.el5_11.src.rpm | SHA-256: 1fe827dbe0e8d2c7c035904b661a6b1a8c22965442e561824f907b69ebdbc53e |
s390x | |
openssl-0.9.8e-32.el5_11.s390.rpm | SHA-256: 89580ca3c032984fa67701256991acc9d3be073e8f2fa1b527e37f7b1c047378 |
openssl-0.9.8e-32.el5_11.s390x.rpm | SHA-256: 5b401e717dc695661749121a3ba85b873af4bee9f45d46dedb61ea07f0a4d4c7 |
openssl-debuginfo-0.9.8e-32.el5_11.s390.rpm | SHA-256: daa7b98b9c09d2e3e06ea8946d690d1623d1e6f89e10f6831a4ed10f0ba0ec82 |
openssl-debuginfo-0.9.8e-32.el5_11.s390x.rpm | SHA-256: 7141b1a9953516c1a0dc40c693ff5b0f6018cc2244e2f652427206dbd10bb945 |
openssl-devel-0.9.8e-32.el5_11.s390.rpm | SHA-256: 33aff42de44a8e3c5d9f81ad5bcf1c56c2da6b4a915de1dc5de3035ceb1790fe |
openssl-devel-0.9.8e-32.el5_11.s390x.rpm | SHA-256: 84d8f17d657eb05a79d7130d8a58a7468e54c509ed12eb882faf49583985d670 |
openssl-perl-0.9.8e-32.el5_11.s390x.rpm | SHA-256: 804edb5a711cead11e598985bbcdac7cac10fffbf6812fe803ddcc4d209cb0d7 |
Red Hat Enterprise Linux for Power, big endian 5
SRPM | |
---|---|
openssl-0.9.8e-32.el5_11.src.rpm | SHA-256: 1fe827dbe0e8d2c7c035904b661a6b1a8c22965442e561824f907b69ebdbc53e |
ppc | |
openssl-0.9.8e-32.el5_11.ppc.rpm | SHA-256: 0dbf5d3efd4eb38352cc81d006954a09a3f58c397433aac87defe1c79d117a8e |
openssl-0.9.8e-32.el5_11.ppc64.rpm | SHA-256: 12e02ff89787707e5135ceb63a3df1a24ff27d61a65f42841367be9711b6be6e |
openssl-debuginfo-0.9.8e-32.el5_11.ppc.rpm | SHA-256: df39ed2afa0863f692bc2701af525dc00ce013a1935f7528d11da3ee46b6ff7f |
openssl-debuginfo-0.9.8e-32.el5_11.ppc64.rpm | SHA-256: d029fb104a69e7b8561ca8dbce7b1d694f2483fcdcbdadf506e7a82810e6fdd3 |
openssl-devel-0.9.8e-32.el5_11.ppc.rpm | SHA-256: 4477dda32f6655d79f36ada78b428a03fcc6934187df89f2db87f89e973ae20c |
openssl-devel-0.9.8e-32.el5_11.ppc64.rpm | SHA-256: b585fb35386814fbd9fa19a54a13c91777a7da5a1225192a7c580a2cec36ac17 |
openssl-perl-0.9.8e-32.el5_11.ppc.rpm | SHA-256: 1a8957b858136d061b82131a4e3ec40fec8655ce2c76436d4766908f1883ff1c |
Red Hat Enterprise Linux Server from RHUI 5
SRPM | |
---|---|
openssl-0.9.8e-32.el5_11.src.rpm | SHA-256: 1fe827dbe0e8d2c7c035904b661a6b1a8c22965442e561824f907b69ebdbc53e |
x86_64 | |
openssl-0.9.8e-32.el5_11.i686.rpm | SHA-256: 925442e513f0ee1b84ae5e6370f99008e8b2b61717025a859323b15bb1db2eb6 |
openssl-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: bc1c66bc2c9a39bb8c24ccc95cfee7b86660e01662a43d867840909e7e10601f |
openssl-debuginfo-0.9.8e-32.el5_11.i386.rpm | SHA-256: 5d493431840667f45fd6b5904c31095ca594c1c7320b8f9317ecbe03f9c8956c |
openssl-debuginfo-0.9.8e-32.el5_11.i686.rpm | SHA-256: 859eb11c5f308a4aa0d5e8700e743147a81effdbcb0689b2b514c67e6acf257b |
openssl-debuginfo-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: 53062605087f3e8673dc28c3a7eb6b85fdf039b8ac4e48616d1508b79e298176 |
openssl-devel-0.9.8e-32.el5_11.i386.rpm | SHA-256: 79ab9c9024c86ba05b5c6347c784cfa7e93d2e470b7ee99e6d676728b0c5aa0b |
openssl-devel-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: 0a9f738c31af47fe6dd09df15a59f39a06073f8eb5eb464dafce317d45887bf7 |
openssl-perl-0.9.8e-32.el5_11.x86_64.rpm | SHA-256: eaf6be16a5d78c54ef3572b661d4eb803eec72ec71573277a3c4d3f1c769567d |
i386 | |
openssl-0.9.8e-32.el5_11.i386.rpm | SHA-256: d987a9b8e46794113210ac9f1d5c6c47a49e298c24c63c5f6efe5118148c603d |
openssl-0.9.8e-32.el5_11.i686.rpm | SHA-256: 925442e513f0ee1b84ae5e6370f99008e8b2b61717025a859323b15bb1db2eb6 |
openssl-debuginfo-0.9.8e-32.el5_11.i386.rpm | SHA-256: 5d493431840667f45fd6b5904c31095ca594c1c7320b8f9317ecbe03f9c8956c |
openssl-debuginfo-0.9.8e-32.el5_11.i686.rpm | SHA-256: 859eb11c5f308a4aa0d5e8700e743147a81effdbcb0689b2b514c67e6acf257b |
openssl-devel-0.9.8e-32.el5_11.i386.rpm | SHA-256: 79ab9c9024c86ba05b5c6347c784cfa7e93d2e470b7ee99e6d676728b0c5aa0b |
openssl-perl-0.9.8e-32.el5_11.i386.rpm | SHA-256: 2604d06e8ac36e828cdcbdb8d4c901fb62e8ec3b63a92161075dc6cc0ecd34b4 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.