Red Hat Linux RHSA-2004:121-01 Critical OpenSSL Denial of Service

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs.

Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

If up2date fails to connect to Red Hat Network due to SSL Certificate Errors, you need to install a version of the up2date client with an updated certificate. The latest version of up2date is available from the Red Hat FTP site and may also be downloaded directly from the RHN website:

https://access.redhat.com

5. RPMs required:

Red Hat Linux 9:

SRPMS:

i386:

i686:

6. Verificationx:

MD5 sum Package Name

fccbfa420f0e35abf2e3f1b7cfda504b 9/en/os/SRPMS/openssl-0.9.7a-20.2.src.rpm 6596a94a38bab238fcdf44f39fa9286a 9/en/os/SRPMS/openssl096-0.9.6-25.9.src.rpm aec0dff60087c0deb0a3c7dbfe913b09 9/en/os/SRPMS/openssl096b-0.9.6b-15.src.rpm 9fbb1bc859dc155cfcb697b08d47c2b4 9/en/os/i386/openssl-0.9.7a-20.2.i386.rpm 2e29e4f4d0d2094f4adef29bda25f33f 9/en/os/i386/openssl-devel-0.9.7a-20.2.i386.rpm edc37f7dea6dd4eb9ef3b04546f58661 9/en/os/i386/openssl-perl-0.9.7a-20.2.i386.rpm efba1c47b07e268b6181dd3d712813fa 9/en/os/i386/openssl096-0.9.6-25.9.i386.rpm b49b6268f779cfd8284a375bf03d6641 9/en/os/i386/openssl096b-0.9.6b-15.i386.rpm e39bbb9c8235f9b6584eb8472f68a68c 9/en/os/i686/openssl-0.9.7a-20.2.i686.rpm

These packages are GPG signed by Red Hat for security. Our key is available from https://access.redhat.com/security/team/key

You can verify each package with the following command:

rpm --checksig -v

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command:

md5sum