openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-480)

This update improves the verification of return values. Prior to this udpate it was possible to bypass the certification chain checks of openssl. CVE-2008-5077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-480)

This update improves the verification of return values. Prior to this udpate it was possible to bypass the certification chain checks of openssl. CVE-2008-5077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-788)

This update of openssl fixes the following problems : - CVE-2009-0590: ASN1STRINGprintex function allows remote denial of service - CVE-2009-0789: denial of service due to malformed ASN.1 structures %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-788)

This update of openssl fixes the following problems : - CVE-2009-0590: ASN1STRINGprintex function allows remote denial of service - CVE-2009-0789: denial of service due to malformed ASN.1 structures %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

openSUSE 10 Security Update : compat-openssl097g (compat-openssl097g-5964)

This update improves the verification of return values. Prior to this udpate it was possible to bypass the certification chain checks of openssl. CVE-2008-5077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 2163)

A buffer overflow condition within the SSLgetsharedciphers function and a DoS condition known as 'parasitic public keys' have been fixed. The later problem allowed attackers to trick the OpenSSL engine to spend an extraordinary amount of time to process public keys. The following CAN numbers have...

openSUSE 10 Security Update : compat-openssl097g (compat-openssl097g-2171)

A buffer overflow condition within the SSLgetsharedciphers function and a DoS condition known as 'parasitic public keys' have been fixed. The later problem allowed attackers to trick the OpenSSL engine to spend an extraordinary amount of time to process public keys. The following CAN numbers have...