[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2016:2458-1 -- SLES openssl, libopenssl0_9_8

ID: oval:org.secpod.oval:def:89045357Date: (C)2021-08-03   (M)2024-04-17
Class: PATCHFamily: unix




This update for openssl fixes the following issues: OpenSSL Security Advisory [22 Sep 2016] Severity: High * OCSP Status Request extension unbounded memory growth Severity: Low * Pointer arithmetic undefined behavior * Constant time flag not preserved in DSA signing * DTLS buffered message DoS * DTLS replay protection DoS * OOB write in BN_bn2dec * Birthday attack against 64-bit block ciphers * Malformed SHA512 ticket DoS * OOB write in MDC2_Update * Certificate message OOB reads More information can be found on: https://www.openssl.org/news/secadv/20160922.txt Bugs fixed: * Update expired S/MIME certs * Fix crash in print_notice * Resume reading from /dev/urandom when interrupted by a signal

Platform:
SUSE Linux Enterprise Server 11 SP4
Product:
openssl
libopenssl0_9_8
Reference:
SUSE-SU-2016:2458-1
CVE-2016-2177
CVE-2016-2178
CVE-2016-2179
CVE-2016-2181
CVE-2016-2182
CVE-2016-2183
CVE-2016-6302
CVE-2016-6303
CVE-2016-6304
CVE-2016-6306
CVE    10
CVE-2016-2181
CVE-2016-2182
CVE-2016-2183
CVE-2016-2177
...
CPE    35
cpe:/a:openssl:openssl:1.0.1:beta1
cpe:/a:openssl:openssl
cpe:/a:openssl:libopenssl0_9_8
cpe:/a:openssl:openssl:1.0.1:beta3
...

© SecPod Technologies