SUSE 11 SP2: 2012:0623-1 Important OpenSSL Memory Problem

This update of openssl fixes an integer conversation issue which could cause a heap-based memory corruption (CVE-2012-2110 ). Additionally, a check for negative buffer length values was added ( CVE-2012-2131 ) and the stack made non-executable by marking the enhanced Intel SSSE3 assembler code as not needing executable stack. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-libopenssl-devel-6245 - SUSE Linux Enterprise Software Development Kit 11 SP1: