Fedora Core 3: FEDORA-2005-389 Moderate: OpenSSL DoS Fix

The OpenSSL toolkit provides support for secure communications between

machines. OpenSSL includes a certificate management tool and shared

libraries which provide various cryptographic algorithms and

protocols.

- fix CAN-2005-0109 - use constant time/memory access mod_exp

so bits of private key aren't leaked by cache eviction (#157631)

* Fri Nov 19 2004 Nalin Dahyabhai 0.9.7a-42

- rebuild

* Fri Nov 19 2004 Nalin Dahyabhai 0.9.7a-41

- remove der_chop, as upstream cvs has done (CAN-2004-0975, #140040)

df8691279173bbca1e9ed547c90cfe3e SRPMS/openssl-0.9.7a-42.1.src.rpm

9b0749b67c57327325f855d639be133f x86_64/openssl-0.9.7a-42.1.x86_64.rpm

b746fb17230d8de735299cab45bcfd2c x86_64/openssl-devel-0.9.7a-42.1.x86_64.rpm

5d44ad539df5c17e8da18d07a4423439 x86_64/openssl-perl-0.9.7a-42.1.x86_64.rpm

9234e0301b03f8cef934307f783f588c x86_64/debug/openssl-debuginfo-0.9.7a-42.1.x86_64.rpm

a36bd2d91d6d55cd676e2a9fd475bf19 x86_64/openssl-0.9.7a-42.1.i386.rpm

6461f17fd031aa8b11546ba11e477890 x86_64/openssl-0.9.7a-42.1.i686.rpm

a36bd2d91d6d55cd676e2a9fd475bf19 i386/openssl-0.9.7a-42.1.i386.rpm

d03b844f9811d79b046a63a92a0e1de3 i386/openssl-devel-0.9.7a-42.1.i386.rpm

3ee686195d2120098a3456101e73d151 i386/openssl-perl-0.9.7a-42.1.i386.rpm

0fa385ece6f568e5a6ca263f39db6753 i386/debug/openssl-debuginfo-0.9.7a-42.1.i386.rpm

6461f17fd031aa8b11546ba11e477890 i386/openssl-0.9.7a-42.1.i686.rpm

23df91aeb9b0c55b17dbe7a6286bc59b i386/debug/openssl-debuginfo-0.9.7a-42.1.i686.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com