Lucene search

K
suseSuseSUSE-SU-2014:1387-1
HistoryNov 11, 2014 - 1:04 a.m.

Security update for OpenSSL (important)

2014-11-1101:04:46
lists.opensuse.org
16

0.975 High

EPSS

Percentile

100.0%

This OpenSSL update fixes the following issues:

   * Session Ticket Memory Leak (CVE-2014-3567)
   * Build option no-ssl3 is incomplete ((CVE-2014-3568)
   * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

   * CVE-2014-3567
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567</a>&gt;
   * CVE-2014-3566
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566</a>&gt;
   * CVE-2014-3568
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568</a>&gt;