Oval Definition:oval:org.opensuse.security:def:78348
Revision Date:2016-05-09Version:1
Title:Security update for compat-openssl098 (Important)
Description:

This update for compat-openssl098 fixes the following issues:

- CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation 'CacheBleed' (bsc#968050) - bsc#976943: Buffer overrun in ASN1_parse

The following non-security bugs were fixed:

- bsc#889013: Rename README.SuSE to the new spelling (bsc#889013)
Family:unixClass:patch
Status:Reference(s):889013
968050
976942
976943
977614
977615
977617
CVE-2016-0702
CVE-2016-2105
CVE-2016-2106
CVE-2016-2108
CVE-2016-2109
SUSE-SU-2016:1267-1
Platform(s):SUSE Linux Enterprise Desktop 12
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • libopenssl0_9_8-0.9.8j-97.1 is installed
  • OR libopenssl0_9_8-32bit-0.9.8j-97.1 is installed
    • BACK