Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 519
Alerts This Week
Warning Icon 1 519

openSUSE 11.4: Update 2012:0083-1 Addresses Critical OpenSSL Flaws

opensuse
Calendar Grey January 16, 2012
Dist Opensuse Esm H88
Addresses multiple vulnerabilities in OpenSSL, providing crucial enhancements for openSUSE users. Discover installation guidelines within this article.
An update that fixes 5 vulnerabilities is now available

Description

Various security vulnerabilities have been fixed in openssl:

- DTLS plaintext recovery attack (CVE-2011-4108)

- uninitialized SSL 3.0 padding (CVE-2011-4576)

- malformed RFC 3779 data can cause assertion failures

(CVE-2011-4577)

- SGC restart DoS attack (CVE-2011-4619)

- invalid GOST parameters DoS attack (CVE-2012-0027)

Topics%20covered

Topics Covered

security advisory update DoS important openssl fixed issues patch instructions

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 11.4:

zypper in -t patch libopenssl-devel-5634

- openSUSE 11.3:

zypper in -t patch libopenssl-devel-5634

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 11.4 (i586 x86_64):

libopenssl-devel-1.0.0c-18.23.1

libopenssl1_0_0-1.0.0c-18.23.1

openssl-1.0.0c-18.23.1

- openSUSE 11.4 (x86_64):

libopenssl1_0_0-32bit-1.0.0c-18.23.1

- openSUSE 11.4 (noarch):

openssl-doc-1.0.0c-18.23.1

- openSUSE 11.3 (i586 x86_64):

libopenssl-devel-1.0.0-6.13.1

libopenssl1_0_0-1.0.0-6.13.1

openssl-1.0.0-6.13.1

- openSUSE 11.3 (x86_64):

libopenssl1_0_0-32bit-1.0.0-6.13.1

- openSUSE 11.3 (noarch):

openssl-doc-1.0.0-6.13.1

References

https://www.suse.com/security/cve/CVE-2011-4108.html

https://www.suse.com/security/cve/CVE-2011-4576.html

https://www.suse.com/security/cve/CVE-2011-4577.html

https://www.suse.com/security/cve/CVE-2011-4619.html

https://www.suse.com/security/cve/CVE-2012-0027.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2012:0083-1
Rating: important
Affected Products: openSUSE 11.4 openSUSE 11.3 .

Topics%20covered

Topics Covered

security advisory update DoS important openssl fixed issues patch instructions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.