Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE: 2012:0679-1 Important: OpenSSL Denial Of Service Fix

suse
Calendar Grey May 31, 2012
Scroller Suse
Crucial SUSE patch for openssl addresses denial of service vulnerabilities and features errata specifics alongside a comprehensive package inventory.
An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is ...

Summary

This update of openssl fixes the following denial of service vulnerabilities: * Denial of Service via CBC mode handling. (CVE-2012-2333 ) * A deadlock condition introduced by the previous memory leak fix due to entering a lock twice. This would only happen in multithreaded programs. In addition, openssl's cms subcommand (Crypthographic Message Syntax) has been enabled. Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): openssl-0.9.8a-18.70.5 openssl-devel-0.9.8a-18.70.5 openssl-doc-0.9.8a-18.70.5 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): openssl-32bit-0.9.8a-18.70.5 openssl-devel-32bit-0.9.8a-18.70.5 - SUSE Linux Enterprise Server 10 SP4 (ia64): openssl-x86-0.9.8a-18.70.5

Topics%20covered

Topics Covered

security advisory denial of service update important fix openssl SUSE Linux Enterprise

References

#749735 #761838

Cross- CVE-2012-2333

Affected Products:

SUSE Linux Enterprise Server 10 SP4

SUSE Linux Enterprise Desktop 10 SP4

SLE SDK 10 SP4

https://www.suse.com/security/cve/CVE-2012-2333.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2012:0679-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service update important fix openssl SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.