Lucene search

K
suseSuseOPENSUSE-SU-2016:1273-1
HistoryMay 11, 2016 - 12:07 a.m.

Security update for compat-openssl098 (important)

2016-05-1100:07:42
lists.opensuse.org
21

0.898 High

EPSS

Percentile

98.5%

This update for compat-openssl098 fixes the following issues:

  • CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617)
  • CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614)
  • CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615)
  • CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942)
  • CVE-2016-0702: Side channel attack on modular exponentiation
    "CacheBleed" (bsc#968050)
  • bsc#976943: Buffer overrun in ASN1_parse

The following non-security bugs were fixed:

  • bsc#889013: Rename README.SuSE to the new spelling (bsc#889013)

This update was imported from the SUSE:SLE-12:Update update project.

0.898 High

EPSS

Percentile

98.5%

Related for OPENSUSE-SU-2016:1273-1