shield Security update for compat-openssl098

SUSE-SLE-Module-Legacy-12-2014-83

compat-openssl098 was updated to fix three security issues. NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability. OpenSSL only adds downgrade detection support for client applications. See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations. These security issues were fixed: - Session ticket memory leak (CVE-2014-3567). - Fixed build option no-ssl3 (CVE-2014-3568). - Added support for TLS_FALLBACK_SCSV (CVE-2014-3566).

• Release Date
  Dec 1 2014
• References
  Bugzilla: 901223, 901277
  CVEs: CVE-2014-3568, CVE-2014-3566, CVE-2014-3567
• Type
  security
• Severity
  moderate

cloud_download Downloads

Legacy Module 12 x86_64

• Packages
  compat-openssl098
  Secure Sockets and Transport Layer Security

  0.9.8j-66.3 lock src

  libopenssl0_9_8
  Secure Sockets and Transport Layer Security

  0.9.8j-66.3 lock rpm

  libopenssl0_9_8-32bit
  Secure Sockets and Transport Layer Security

  0.9.8j-66.3 lock rpm

Legacy Module 12 s390x

• Packages
  compat-openssl098
  Secure Sockets and Transport Layer Security

  0.9.8j-66.3 lock src

  libopenssl0_9_8
  Secure Sockets and Transport Layer Security

  0.9.8j-66.3 lock rpm

  libopenssl0_9_8-32bit
  Secure Sockets and Transport Layer Security

  0.9.8j-66.3 lock rpm