Red Hat Security Advisory: openssl security and bug fix update Security Advisory secalert@redhat.com Red Hat Security Response Team RHSA-2012:0699 Final 1 1 2012-05-29T16:45:00Z Current version 2012-05-29T16:45:00Z 2012-05-29T16:45:00Z Red Hat rhsa-to-cvrf 1.0.1484 2012-05-29T16:58:02Z Updated openssl packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library. An integer underflow flaw, leading to a buffer over-read, was found in the way OpenSSL handled DTLS (Datagram Transport Layer Security) application data record lengths when using a block cipher in CBC (cipher-block chaining) mode. A malicious DTLS client or server could use this flaw to crash its DTLS connection peer. (CVE-2012-2333) Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Codenomicon as the original reporter. On Red Hat Enterprise Linux 6, this update also fixes an uninitialized variable use bug, introduced by the fix for CVE-2012-0884 (released via RHSA-2012:0426). This bug could possibly cause an attempt to create an encrypted message in the CMS (Cryptographic Message Syntax) format to fail. All OpenSSL users should upgrade to these updated packages, which contain a backported patch to resolve these issues. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. Please see https://www.redhat.com/footer/terms-of-use.html Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate https://rhn.redhat.com/errata/RHSA-2012-0699.html https://rhn.redhat.com/errata/RHSA-2012-0699.html https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/security/updates/classification/#moderate https://rhn.redhat.com/errata/RHSA-2012-0426.html https://rhn.redhat.com/errata/RHSA-2012-0426.html Red Hat Enterprise Linux Workstation Optional (v. 6) Red Hat Enterprise Linux Desktop (v. 5 client) Red Hat Enterprise Linux HPC Node (v. 6) Red Hat Enterprise Linux Desktop (v. 6) Red Hat Enterprise Linux Server Optional (v. 6) Red Hat Enterprise Linux HPC Node Optional (v. 6) Red Hat Enterprise Linux Server (v. 6) Red Hat Enterprise Linux Workstation (v. 6) Red Hat Enterprise Linux Desktop Optional (v. 6) Red Hat Enterprise Linux (v. 5 server) RHEL Desktop Workstation (v. 5 client) openssl-0.9.8e-22.el5_8.4.src.rpm openssl-1.0.0-20.el6_2.5.src.rpm openssl-1.0.0-20.el6_2.5 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-0.9.8e-22.el5_8.4 as a component of Red Hat Enterprise Linux Desktop (v. 5 client) openssl-1.0.0-20.el6_2.5 as a component of Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.0-20.el6_2.5 as a component of Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.0-20.el6_2.5 as a component of Red Hat Enterprise Linux Server Optional (v. 6) openssl-1.0.0-20.el6_2.5 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-1.0.0-20.el6_2.5 as a component of Red Hat Enterprise Linux Server (v. 6) openssl-1.0.0-20.el6_2.5 as a component of Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.0-20.el6_2.5 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-0.9.8e-22.el5_8.4 as a component of Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-22.el5_8.4 as a component of RHEL Desktop Workstation (v. 5 client) An integer underflow flaw, leading to a buffer over-read, was found in the way OpenSSL handled DTLS (Datagram Transport Layer Security) application data record lengths when using a block cipher in CBC (cipher-block chaining) mode. A malicious DTLS client or server could use this flaw to crash its DTLS connection peer. 2012-05-09T00:00:00Z 2012-05-10T00:00:00Z CVE-2012-2333 5Client-5.8.Z:openssl-0.9.8e-22.el5_8.4 5Client-Workstation-5.8.Z:openssl-0.9.8e-22.el5_8.4 5Server-5.8.Z:openssl-0.9.8e-22.el5_8.4 6Client-6.2.z:openssl-1.0.0-20.el6_2.5 6Client-optional-6.2.z:openssl-1.0.0-20.el6_2.5 6ComputeNode-6.2.z:openssl-1.0.0-20.el6_2.5 6ComputeNode-optional-6.2.z:openssl-1.0.0-20.el6_2.5 6Server-6.2.z:openssl-1.0.0-20.el6_2.5 6Server-optional-6.2.z:openssl-1.0.0-20.el6_2.5 6Workstation-6.2.z:openssl-1.0.0-20.el6_2.5 6Workstation-optional-6.2.z:openssl-1.0.0-20.el6_2.5 Moderate 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 https://rhn.redhat.com/errata/RHSA-2012-0699.html http://openssl.org/news/secadv_20120510.txt http://openssl.org/news/secadv_20120510.txt https://www.redhat.com/security/data/cve/CVE-2012-2333.html CVE-2012-2333 https://bugzilla.redhat.com/show_bug.cgi?id=820686 bz#820686: CVE-2012-2333 openssl: record length handling integer underflow Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Codenomicon as the original reporter.