[ol7_optional_archive] openssl-perl-1:1.0.1e-34.el7_0.6.x86_64

Name:	openssl-perl
Epoch:	1
Version:	1.0.1e
Release:	34.el7_0.6
Architecture:	x86_64
Group:	Applications/Internet
Size:	20265
License:	OpenSSL
RPM:	openssl-perl-1.0.1e-34.el7_0.6.x86_64.rpm
Source RPM:	openssl-1.0.1e-34.el7_0.6.src.rpm
Build Date:	Thu Oct 16 2014
Build Host:	ca-buildj3.us.oracle.com
Vendor:	Oracle America
URL:	http://www.openssl.org/
Summary:	Perl scripts provided with OpenSSL
Description:	OpenSSL is a toolkit for supporting cryptography. The openssl-perl package provides Perl scripts for converting certificates and keys from other formats to the formats used by the OpenSSL toolkit.

Changelog (Show File list) (Show related packages)

Wed Oct 15 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34.6

- fix CVE-2014-3567 - memory leak when handling session tickets
- fix CVE-2014-3513 - memory leak in srtp support
- add support for fallback SCSV to partially mitigate CVE-2014-3566
  (padding attack on SSL3)

Fri Aug 08 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34.4

- fix CVE-2014-3505 - doublefree in DTLS packet processing
- fix CVE-2014-3506 - avoid memory exhaustion in DTLS
- fix CVE-2014-3507 - avoid memory leak in DTLS
- fix CVE-2014-3508 - fix OID handling to avoid information leak
- fix CVE-2014-3509 - fix race condition when parsing server hello
- fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
- fix CVE-2014-3511 - disallow protocol downgrade via fragmentation

Tue Jun 03 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34.3

- fix CVE-2010-5298 - possible use of memory after free
- fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
- fix CVE-2014-0198 - possible NULL pointer dereference
- fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
- fix CVE-2014-0224 - SSL/TLS MITM vulnerability
- fix CVE-2014-3470 - client-side DoS when using anonymous ECDH

Tue Apr 08 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34

- fix CVE-2014-0160 - information disclosure in TLS heartbeat extension

Fri Feb 14 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-33

- use the key length from configuration file if req -newkey rsa is invoked

Thu Feb 13 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-32
```
- avoid unnecessary reseeding in BN_rand in the FIPS mode
```

Wed Feb 12 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-31

- print ephemeral key size negotiated in TLS handshake (#1057715)
- add DH_compute_key_padded needed for FIPS CAVS testing
- make expiration and key length changeable by DAYS and KEYLEN
  variables in the certificate Makefile (#1058108)
- change default hash to sha256 (#1062325)
- lower the actual 3des strength so it is sorted behind aes128 (#1056616)

Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1:1.0.1e-30
```
- Mass rebuild 2014-01-24
```
Wed Jan 15 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-29
```
- rebuild with -O3 on ppc64 architecture
```

Tue Jan 07 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-28

- fix CVE-2013-4353 - Invalid TLS handshake crash
- fix CVE-2013-6450 - possible MiTM attack on DTLS1