Issued:
2010-12-13
Updated:
2010-12-13

RHSA-2010:0977 - Security Advisory

Synopsis

Moderate: openssl security update

Type/Severity

Security Advisory: Moderate

Topic

Updated openssl packages that fix three security issues are now available
for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

Description

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.

A ciphersuite downgrade flaw was found in the OpenSSL SSL/TLS server code.
A remote attacker could possibly use this flaw to change the ciphersuite
associated with a cached session stored on the server, if the server
enabled the SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG option, possibly
forcing the client to use a weaker ciphersuite after resuming the session.
(CVE-2010-4180, CVE-2008-7270)

Note: With this update, setting the SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
option has no effect and this bug workaround can no longer be enabled.

It was discovered that OpenSSL did not always check the return value of the
bn_wexpand() function. An attacker able to trigger a memory allocation
failure in that function could possibly crash an application using the
OpenSSL library and its UBSEC hardware engine support. (CVE-2009-3245)

All OpenSSL users should upgrade to these updated packages, which contain
backported patches to resolve these issues. For the update to take effect,
all services linked to the OpenSSL library must be restarted, or the system
rebooted.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 4.8 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.8 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.8 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.8 ppc

Fixes

  • BZ - 570924 - CVE-2009-3245 openssl: missing bn_wexpand return value checks
  • BZ - 659462 - CVE-2010-4180 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack
  • BZ - 660650 - CVE-2008-7270 openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG downgrade-to-disabled ciphersuite attack

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
openssl-0.9.7a-43.17.el4_8.6.src.rpm SHA-256: 9254cdd1594f755b141af4f54e701646b5732a29632bc0739e02344113c0602d
x86_64
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 9adec96b6dcbf3e97a7cdbb6249626d162cccf82c50998ccfb1f16be3e4ceb25
openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 9adec96b6dcbf3e97a7cdbb6249626d162cccf82c50998ccfb1f16be3e4ceb25
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: ef829535efbc82db45aaf8903ec7de429eb81af6901ac7f60d93cee692697d24
openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: ef829535efbc82db45aaf8903ec7de429eb81af6901ac7f60d93cee692697d24
openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 0deb8299ba1455c7ed0a1612ab304fc50b373b218d2d290577600d58a15c0bdb
openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 0deb8299ba1455c7ed0a1612ab304fc50b373b218d2d290577600d58a15c0bdb
ia64
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 21d16c37ff52dd0961eeec75ccab5adb013bfcec50466d79ee205babb2aeb187
openssl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 21d16c37ff52dd0961eeec75ccab5adb013bfcec50466d79ee205babb2aeb187
openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 737c96c0a33174eba433fa8d297289ef3f81cf762cf46f3230e084b84a113729
openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 737c96c0a33174eba433fa8d297289ef3f81cf762cf46f3230e084b84a113729
openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 5b159c3d68389d46fb718c6ce3a1dd512f5357566550b030cc85be752f69718b
openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 5b159c3d68389d46fb718c6ce3a1dd512f5357566550b030cc85be752f69718b
i386
openssl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 05687abeeaf7165cf7e450d521cde85a4abf6d795917875dfd9cef06a04e3644
openssl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 05687abeeaf7165cf7e450d521cde85a4abf6d795917875dfd9cef06a04e3644
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 1b75c578e72ebae27553880c60ab65e018eb00d63db38aaf665a71bb0c9dc446
openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 1b75c578e72ebae27553880c60ab65e018eb00d63db38aaf665a71bb0c9dc446

Red Hat Enterprise Linux Server - Extended Update Support 4.8

SRPM
openssl-0.9.7a-43.17.el4_8.6.src.rpm SHA-256: 9254cdd1594f755b141af4f54e701646b5732a29632bc0739e02344113c0602d
x86_64
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 9adec96b6dcbf3e97a7cdbb6249626d162cccf82c50998ccfb1f16be3e4ceb25
openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 9adec96b6dcbf3e97a7cdbb6249626d162cccf82c50998ccfb1f16be3e4ceb25
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: ef829535efbc82db45aaf8903ec7de429eb81af6901ac7f60d93cee692697d24
openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: ef829535efbc82db45aaf8903ec7de429eb81af6901ac7f60d93cee692697d24
openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 0deb8299ba1455c7ed0a1612ab304fc50b373b218d2d290577600d58a15c0bdb
openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 0deb8299ba1455c7ed0a1612ab304fc50b373b218d2d290577600d58a15c0bdb
ia64
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 21d16c37ff52dd0961eeec75ccab5adb013bfcec50466d79ee205babb2aeb187
openssl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 21d16c37ff52dd0961eeec75ccab5adb013bfcec50466d79ee205babb2aeb187
openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 737c96c0a33174eba433fa8d297289ef3f81cf762cf46f3230e084b84a113729
openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 737c96c0a33174eba433fa8d297289ef3f81cf762cf46f3230e084b84a113729
openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 5b159c3d68389d46fb718c6ce3a1dd512f5357566550b030cc85be752f69718b
openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 5b159c3d68389d46fb718c6ce3a1dd512f5357566550b030cc85be752f69718b
i386
openssl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 05687abeeaf7165cf7e450d521cde85a4abf6d795917875dfd9cef06a04e3644
openssl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 05687abeeaf7165cf7e450d521cde85a4abf6d795917875dfd9cef06a04e3644
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 1b75c578e72ebae27553880c60ab65e018eb00d63db38aaf665a71bb0c9dc446
openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 1b75c578e72ebae27553880c60ab65e018eb00d63db38aaf665a71bb0c9dc446

Red Hat Enterprise Linux Workstation 4

SRPM
openssl-0.9.7a-43.17.el4_8.6.src.rpm SHA-256: 9254cdd1594f755b141af4f54e701646b5732a29632bc0739e02344113c0602d
x86_64
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 9adec96b6dcbf3e97a7cdbb6249626d162cccf82c50998ccfb1f16be3e4ceb25
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: ef829535efbc82db45aaf8903ec7de429eb81af6901ac7f60d93cee692697d24
openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 0deb8299ba1455c7ed0a1612ab304fc50b373b218d2d290577600d58a15c0bdb
ia64
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 21d16c37ff52dd0961eeec75ccab5adb013bfcec50466d79ee205babb2aeb187
openssl-devel-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 737c96c0a33174eba433fa8d297289ef3f81cf762cf46f3230e084b84a113729
openssl-perl-0.9.7a-43.17.el4_8.6.ia64.rpm SHA-256: 5b159c3d68389d46fb718c6ce3a1dd512f5357566550b030cc85be752f69718b
i386
openssl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 05687abeeaf7165cf7e450d521cde85a4abf6d795917875dfd9cef06a04e3644
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 1b75c578e72ebae27553880c60ab65e018eb00d63db38aaf665a71bb0c9dc446

Red Hat Enterprise Linux Desktop 4

SRPM
openssl-0.9.7a-43.17.el4_8.6.src.rpm SHA-256: 9254cdd1594f755b141af4f54e701646b5732a29632bc0739e02344113c0602d
x86_64
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 9adec96b6dcbf3e97a7cdbb6249626d162cccf82c50998ccfb1f16be3e4ceb25
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-devel-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: ef829535efbc82db45aaf8903ec7de429eb81af6901ac7f60d93cee692697d24
openssl-perl-0.9.7a-43.17.el4_8.6.x86_64.rpm SHA-256: 0deb8299ba1455c7ed0a1612ab304fc50b373b218d2d290577600d58a15c0bdb
i386
openssl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 05687abeeaf7165cf7e450d521cde85a4abf6d795917875dfd9cef06a04e3644
openssl-0.9.7a-43.17.el4_8.6.i686.rpm SHA-256: fb18e80263dc9fa46e8ca6e4b549b4f345c2926d660181e41252a358a903ec25
openssl-devel-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 8509e4d517898b8d4aa7c97593b01ad2524f9073ce6b9942877c1b35fc2035c0
openssl-perl-0.9.7a-43.17.el4_8.6.i386.rpm SHA-256: 1b75c578e72ebae27553880c60ab65e018eb00d63db38aaf665a71bb0c9dc446

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
openssl-0.9.7a-43.17.el4_8.6.src.rpm SHA-256: 9254cdd1594f755b141af4f54e701646b5732a29632bc0739e02344113c0602d
s390x
openssl-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 51a7a637ebb744237c98c9ba77382e4207680d337f11f8d20986eba13d6b6999
openssl-0.9.7a-43.17.el4_8.6.s390x.rpm SHA-256: 7d1193a50346ce9243707d84fcdd95f7e0866c2ad0b73efc3b529b6d6ca3caad
openssl-devel-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 1702b5328471cb0fee65b3f07006e098df7962a92a1e28ec72fc0245029ff47e
openssl-devel-0.9.7a-43.17.el4_8.6.s390x.rpm SHA-256: e6a3cce8c4a0c4c31ce3a72a466824c4ee6b298937d0231268ecbb41ae69ce33
openssl-perl-0.9.7a-43.17.el4_8.6.s390x.rpm SHA-256: d139c01094fca27454871a4da0d9684eedbb1ff6acfcbcead43f5429018ba303
s390
openssl-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 51a7a637ebb744237c98c9ba77382e4207680d337f11f8d20986eba13d6b6999
openssl-devel-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 1702b5328471cb0fee65b3f07006e098df7962a92a1e28ec72fc0245029ff47e
openssl-perl-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 63d799c873e156744dc7d6acad2154d67fae14b8d46ea7df7848c03fe39661a6

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8

SRPM
openssl-0.9.7a-43.17.el4_8.6.src.rpm SHA-256: 9254cdd1594f755b141af4f54e701646b5732a29632bc0739e02344113c0602d
s390x
openssl-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 51a7a637ebb744237c98c9ba77382e4207680d337f11f8d20986eba13d6b6999
openssl-0.9.7a-43.17.el4_8.6.s390x.rpm SHA-256: 7d1193a50346ce9243707d84fcdd95f7e0866c2ad0b73efc3b529b6d6ca3caad
openssl-devel-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 1702b5328471cb0fee65b3f07006e098df7962a92a1e28ec72fc0245029ff47e
openssl-devel-0.9.7a-43.17.el4_8.6.s390x.rpm SHA-256: e6a3cce8c4a0c4c31ce3a72a466824c4ee6b298937d0231268ecbb41ae69ce33
openssl-perl-0.9.7a-43.17.el4_8.6.s390x.rpm SHA-256: d139c01094fca27454871a4da0d9684eedbb1ff6acfcbcead43f5429018ba303
s390
openssl-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 51a7a637ebb744237c98c9ba77382e4207680d337f11f8d20986eba13d6b6999
openssl-devel-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 1702b5328471cb0fee65b3f07006e098df7962a92a1e28ec72fc0245029ff47e
openssl-perl-0.9.7a-43.17.el4_8.6.s390.rpm SHA-256: 63d799c873e156744dc7d6acad2154d67fae14b8d46ea7df7848c03fe39661a6

Red Hat Enterprise Linux for Power, big endian 4

SRPM
openssl-0.9.7a-43.17.el4_8.6.src.rpm SHA-256: 9254cdd1594f755b141af4f54e701646b5732a29632bc0739e02344113c0602d
ppc
openssl-0.9.7a-43.17.el4_8.6.ppc.rpm SHA-256: 5361c8677c83406c97a45f6069f51827836c9d5a8827f1c15c8f0a8ad9ddc267
openssl-0.9.7a-43.17.el4_8.6.ppc64.rpm SHA-256: b826b9d9680f5ef31b996f51d86c7b184ad1860ed925967d9b9a7e4edeb17cc0
openssl-devel-0.9.7a-43.17.el4_8.6.ppc.rpm SHA-256: 1702b1b8cffd7ecb1b6dd6ef7e1bd18b1b211f578c74004c566cbd7d85101fde
openssl-devel-0.9.7a-43.17.el4_8.6.ppc64.rpm SHA-256: 3898dc8bcf9ef0e6484d10f3caf0c3cb1d74fb9c39c896b7b99d2fb368ad608c
openssl-perl-0.9.7a-43.17.el4_8.6.ppc.rpm SHA-256: 8a52817cf54ce4831f3bfc073e8fdb372ad190c530c0e6d75bb67ae838881bcc

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.8

SRPM
openssl-0.9.7a-43.17.el4_8.6.src.rpm SHA-256: 9254cdd1594f755b141af4f54e701646b5732a29632bc0739e02344113c0602d
ppc
openssl-0.9.7a-43.17.el4_8.6.ppc.rpm SHA-256: 5361c8677c83406c97a45f6069f51827836c9d5a8827f1c15c8f0a8ad9ddc267
openssl-0.9.7a-43.17.el4_8.6.ppc64.rpm SHA-256: b826b9d9680f5ef31b996f51d86c7b184ad1860ed925967d9b9a7e4edeb17cc0
openssl-devel-0.9.7a-43.17.el4_8.6.ppc.rpm SHA-256: 1702b1b8cffd7ecb1b6dd6ef7e1bd18b1b211f578c74004c566cbd7d85101fde
openssl-devel-0.9.7a-43.17.el4_8.6.ppc64.rpm SHA-256: 3898dc8bcf9ef0e6484d10f3caf0c3cb1d74fb9c39c896b7b99d2fb368ad608c
openssl-perl-0.9.7a-43.17.el4_8.6.ppc.rpm SHA-256: 8a52817cf54ce4831f3bfc073e8fdb372ad190c530c0e6d75bb67ae838881bcc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.