shield Security update for openssl

SUSE-SLE-DESKTOP-12-2014-84

openssl was updated to fix four security issues. These security issues were fixed: - SRTP Memory Leak (CVE-2014-3513). - Session Ticket Memory Leak (CVE-2014-3567). - Fixed incomplete no-ssl3 build option (CVE-2014-3568). - Add support for TLS_FALLBACK_SCSV (CVE-2014-3566). NOTE: This update alone DOESN'T FIX the POODLE SSL protocol vulnerability. OpenSSL only adds downgrade detection support for client applications. See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.

• Release Date
  Dec 1 2014
• References
  Bugzilla: 901223, 901277
  CVEs: CVE-2014-3513, CVE-2014-3568, CVE-2014-3566, CVE-2014-3567
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  libopenssl1_0_0
  Secure Sockets and Transport Layer Security

  1.0.1i-9.3 lock rpm

  libopenssl1_0_0-32bit
  Secure Sockets and Transport Layer Security

  1.0.1i-9.3 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  1.0.1i-9.3 lock rpm lock src