Lucene search

K
suseSuseSUSE-SU-2012:0084-1
HistoryJan 16, 2012 - 5:08 p.m.

Security update for OpenSSL (important)

2012-01-1617:08:28
lists.opensuse.org
19

0.234 Low

EPSS

Percentile

96.1%

Various security vulnerabilities have been fixed in OpenSSL:

  • DTLS plaintext recovery attack (CVE-2011-4108)
  • double-free in Policy Checks (CVE-2011-4109)
  • uninitialized SSL 3.0 padding (CVE-2011-4576)
  • malformed RFC 3779 data can cause assertion failures
    (CVE-2011-4577)
  • SGC restart DoS attack (CVE-2011-4619)