A new update is available for Fedora Core - [SECURITY] Fedora Core 4 Update: openssl-0.9.7f-7.10. Here the announcement:
Fedora Update Notification
FEDORA-2005-986
2005-10-13
---------------------------------------------------------------------
Product : Fedora Core 4
Name : openssl
Version : 0.9.7f
Release : 7.10
Summary : The OpenSSL toolkit.
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.
---------------------------------------------------------------------
* Wed Oct 12 2005 Tomas Mraz <tmraz@redhat.com> 0.9.7f-7.10
- fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
disables the countermeasure against man in the middle attack in SSLv2
(#169863)
- more fixes for constant time/memory access for DSA signature algorithm
- updated ICA engine patch
- ca-bundle.crt should be config(noreplace)
- add *.so.soversion as symlinks in /lib (#165264)
- remove unpackaged symlinks (#159595)
- fixes from upstream (bn assembler div on ppc arch,
initialize memory on realloc)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
7a208caac25c849bea298129a50cd07b SRPMS/openssl-0.9.7f-7.10.src.rpm
59019192fd5257073275df66aba0ed9c ppc/openssl-0.9.7f-7.10.ppc.rpm
3efb44c6fa9b7ede9d6bf6ede9aabd16 ppc/openssl-devel-0.9.7f-7.10.ppc.rpm
78e9dc41a9f7da959c79a6b47b364e7c ppc/openssl-perl-0.9.7f-7.10.ppc.rpm
dfd846c61dba5ade1414c5cc40d08014 ppc/debug/openssl-debuginfo-0.9.7f-7.10.ppc.rpm
28be950fca37f2778cb68e18572f3e13 ppc/openssl-0.9.7f-7.10.ppc64.rpm
97ffac074c3e0efc99110726eb6cf3cf x86_64/openssl-0.9.7f-7.10.x86_64.rpm
f7e8e31bfac9e30124850913244b9c1a x86_64/openssl-devel-0.9.7f-7.10.x86_64.rpm
7e6528df16fb831ba79e6faeeea5125a x86_64/openssl-perl-0.9.7f-7.10.x86_64.rpm
d421465583f86241aebd04dc9616fc6e x86_64/debug/openssl-debuginfo-0.9.7f-7.10.x86_64.rpm
10b0af84502fa18f9894e9e759cecd64 i386/openssl-0.9.7f-7.10.i386.rpm
b68877aac95d2066a8880495d96b6105 i386/openssl-devel-0.9.7f-7.10.i386.rpm
752088e010d088efcb8a8d433e7e2814 i386/openssl-perl-0.9.7f-7.10.i386.rpm
aac366e42a46f27c7136e6c4dc602278 i386/debug/openssl-debuginfo-0.9.7f-7.10.i386.rpm
4af1e37b0caba144bd44df07af5f33fb i386/openssl-0.9.7f-7.10.i686.rpm
38e486decdc14d578975079e573202de i386/debug/openssl-debuginfo-0.9.7f-7.10.i686.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
