Lucene search

K
suseSuseSUSE-SU-2016:1206-1
HistoryMay 03, 2016 - 10:08 p.m.

Security update for openssl1 (important)

2016-05-0322:08:22
lists.opensuse.org
34

0.973 High

EPSS

Percentile

99.9%

This update for openssl1 fixes the following issues:

Security issues fixed:

  • CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617)
  • CVE-2016-2107: Padding oracle in AES-NI CBC MAC check (bsc#977616)
  • CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614)
  • CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615)
  • CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942)

Bugs fixed:

  • bsc#971354: libopenssl1_0_0 now Recommends: openssl1 to get correct SSL
    Root Certificate hashes
  • bsc#889013: Rename README.SuSE to the new spelling README.SUSE
  • bsc#976943: Fixed a buffer overrun in ASN1_parse.
  • bsc#977621: Preserve negotiated digests for SNI (bsc#977621)