SuSE 11 Security Update : libopenssl (SAT Patch Number 3509)

The following issue has been fixed : - Multithreaded OpenSSL servers using the TLS server extension were vulnerable to a buffer overrun attack. CVE-2010-3864 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-2232)

This openssl update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand CVE-2009-3245. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-2232)

This openssl update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand CVE-2009-3245. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

openSUSE Security Update : openssl-CVE-2009-4355.patch (openssl-CVE-2009-4355.patch-1833)

Incorrect use of an openssl cleanup function can lead to memory leaks in applications. For example an ssl enabled web server such as apache that uses php, curl and openssl leaks memory if a SIGHUP signal was sent to apache. The openssl cleanup function was made more robust to avoid memory leaks...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-1554)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SuSE 11.2 Security Update: libopenssl-devel (2009-11-13)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-1554)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SLES11: Security update for libopenssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libopenssl098 openssl openssl-doc More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

SLES11: Security update for libopenssl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libopenssl098 openssl openssl-doc More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

SuSE 11 Security Update : libopenssl (SAT Patch Number 1540)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-786)

This update of openssl fixes the following problems : - CVE-2009-0590: ASN1STRINGprintex function allows remote denial of service - CVE-2009-0591: CMSverify function allows signatures to look valid - CVE-2009-0789: denial of service due to malformed ASN.1 structures %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-785)

This update of openssl fixes the following problems : - CVE-2009-0590: ASN1STRINGprintex function allows remote denial of service - CVE-2009-0789: denial of service due to malformed ASN.1 structures %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-907)

Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS CVE-2009-1377, a DTLS fragment handling memory DoS CVE-2009-1378 and a DTLS fragment read after a free DoS CVE-2009-1379. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-461)

This update improves the verification of return values. Prior to this udpate it was possible to bypass the certification chain checks of openssl. CVE-2008-5077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-461)

This update improves the verification of return values. Prior to this udpate it was possible to bypass the certification chain checks of openssl. CVE-2008-5077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-974)

OpenSSL DTLS remote DoS in ChangeCipherSpec CVE-2009-1386 and in out-of-sequence message handling CVE-2009-1387 have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-974)

OpenSSL DTLS remote DoS in ChangeCipherSpec CVE-2009-1386 and in out-of-sequence message handling CVE-2009-1387 have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-907)

Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS CVE-2009-1377, a DTLS fragment handling memory DoS CVE-2009-1378 and a DTLS fragment read after a free DoS CVE-2009-1379. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6291)

OpenSSL DTLS remote DoS in ChangeCipherSpec CVE-2009-1386 and in out-of-sequence message handling CVE-2009-1387 have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6268)

Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS CVE-2009-1377, a DTLS fragment handling memory DoS CVE-2009-1378 and a DTLS fragment read after a free DoS CVE-2009-1379. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...