Lucene search

K
suseSuseOPENSUSE-SU-2015:1139-1
HistoryJun 25, 2015 - 11:05 a.m.

Security update for openssl (important)

2015-06-2511:05:10
lists.opensuse.org
27

0.975 High

EPSS

Percentile

100.0%

openssl was updated to fix six security issues.

The following vulnerabilities were fixed:

  • CVE-2015-4000: The Logjam Attack / weakdh.org. Rject connections with DH
    parameters shorter than 768 bits, generates 2048-bit DH parameters by
    default. (boo#931698)
  • CVE-2015-1788: Malformed ECParameters causes infinite loop (boo#934487)
  • CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
    (boo#934489)
  • CVE-2015-1790: PKCS7 crash with missing EnvelopedContent (boo#934491)
  • CVE-2015-1792: CMS verify infinite loop with unknown hash function
    (boo#934493)
  • CVE-2015-1791: race condition in NewSessionTicket (boo#933911)
  • CVE-2015-3216: Crash in ssleay_rand_bytes due to locking regression
    (boo#933898)