Security update for libopenssl0_9_8 (important)

2016-05-05T13:09:43
ID OPENSUSE-SU-2016:1239-1
Type suse
Reporter Suse
Modified 2016-05-05T13:09:43

Description

This update for libopenssl0_9_8 fixes the following issues:

  • CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614)
  • CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615)
  • CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617)
  • CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942)
  • CVE-2016-0702: Side channel attack on modular exponentiation "CacheBleed" (bsc#968050)
  • bsc#976943: Buffer overrun in ASN1_parse

and updates the package to version 0.9.8zh which collects many other fixes, including security ones.