gpp_maybe Security update for openssl

sdksp4-openssl-12557

This update for openssl fixes the following issues: Security issues fixed: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation "CacheBleed" (bsc#968050) Bugs fixed: - fate#320304: build 32bit devel package - bsc#976943: Fix buffer overrun in ASN1_parse - bsc#973223: allow weak DH groups, vulnerable to the logjam attack, when environment variable OPENSSL_ALLOW_LOGJAM_ATTACK is set - bsc#889013: Rename README.SuSE to the new spelling

• Release Date
  May 12 2016
• References
  Bugzilla: 889013, 976943, 976942, 968050, 977617, 977614, 977615
  CVEs: CVE-2016-2109, CVE-2016-2108, CVE-2016-2105, CVE-2016-2106, CVE-2016-0702
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.97.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.97.1 lock src

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.97.1 lock rpm

  libopenssl-devel-32bit
  Include Files and Libraries mandatory for Development

  0.9.8j-0.97.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.97.1 lock src

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.97.1 lock rpm

  libopenssl-devel-32bit
  Include Files and Libraries mandatory for Development

  0.9.8j-0.97.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.97.1 lock src

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.97.1 lock rpm

  libopenssl-devel-32bit
  Include Files and Libraries mandatory for Development

  0.9.8j-0.97.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.97.1 lock src

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libopenssl-devel
  Include Files and Libraries mandatory for Development

  0.9.8j-0.97.1 lock rpm

  openssl
  Secure Sockets and Transport Layer Security

  0.9.8j-0.97.1 lock src