[SECURITY] Fedora Core 4 Update: openssl097a-0.9.7a-3.1

[Tomas Mraz]

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-986
2005-10-13
---------------------------------------------------------------------

Product     : Fedora Core 4
Name        : openssl097a
Version     : 0.9.7a                      
Release     : 3.1                  
Summary     : The OpenSSL toolkit.
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.

---------------------------------------------------------------------

* Tue Oct 11 2005 Tomas Mraz <tmraz(a)redhat.com&gt; 0.9.7a-3.1
- fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
  disables the countermeasure against man in the middle attack in SSLv2
  (#169863)
- more fixes for constant time/memory access for DSA signature algorithm
- updated ICA engine patch


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

7b5d366a2175f506df5470052584f931  SRPMS/openssl097a-0.9.7a-3.1.src.rpm
af1d476f7115ee75d213daa91bb42808  ppc/openssl097a-0.9.7a-3.1.ppc.rpm
2b51057a778da0e5cd3ce961499fd4e7  ppc/debug/openssl097a-debuginfo-0.9.7a-3.1.ppc.rpm
aeaeb2f3d8bc9f2a58a54c7fdead02f8  x86_64/openssl097a-0.9.7a-3.1.x86_64.rpm
5bb4865bf5b279349115cd4327939d8c 
x86_64/debug/openssl097a-debuginfo-0.9.7a-3.1.x86_64.rpm
89142415f683cf15a74b1b6cf8fcaeda  i386/openssl097a-0.9.7a-3.1.i386.rpm
6d9052a438a4e279baf5e3e633502fe0  i386/debug/openssl097a-debuginfo-0.9.7a-3.1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------