shield Security update for openssl

sdksp4-openssl-12264

This update for openssl fixes the following issues: - CVE-2015-3195: When presented with a malformed X509_ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS#7 and CMS routines so any application which reads PKCS#7 or CMS data from untrusted sources is affected. SSL/TLS is not affected. (bsc#957812) - Prevent segfault in s_client with invalid options (bsc#952099)

• Release Date
  Dec 15 2015
• References
  Bugzilla: 957812, 952099
  CVEs: CVE-2015-3195
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.80.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.80.1 lock src

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.80.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.80.1 lock src

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.80.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.80.1 lock src

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.80.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.80.1 lock src

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.80.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.80.1 lock src