Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 438
Alerts This Week
Warning Icon 1 438

SUSE Linux Server 11: SUSE-SU-2014:0761-1 Critical OpenSSL Issues

suse
Calendar Grey June 6, 2014
Scroller Suse
SUSE Security Update for OpenSSL: urgent fixes addressing multiple security concerns, featuring vulnerabilities that could lead to Denial of Service attacks.
An update that solves four vulnerabilities and has three An update that solves four vulnerabilities and has three An update that solves four vulnerabilities and has three fixes is ...

Summary

OpenSSL was updated to fix several vulnerabilities: * SSL/TLS MITM vulnerability. (CVE-2014-0224) * DTLS recursion flaw. (CVE-2014-0221) * Anonymous ECDH denial of service. (CVE-2014-3470) * Using the FLUSH+RELOAD Cache Side-channel Attack the nonces could have been recovered. (CVE-2014-0076) Further information can be found at . Additionally, the following non-security fixes and enhancements have been included in this release: * Ensure that the stack is marked non-executable on x86 32bit. On other processor platforms it was already marked as non-executable before. (bnc#870192) * IPv6 support was added to the openssl s_client and s_server command line tool. (bnc#859228) * The openssl command line tool now checks certificates by default

Topics%20covered

Topics Covered

security advisory security issue update critical OpenSSL Denial of Service SUSE Linux

References

#859228 #859924 #860332 #862181 #869945 #870192

#880891

Cross- CVE-2014-0076 CVE-2014-0221 CVE-2014-0224

CVE-2014-3470

Affected Products:

SUSE Linux Enterprise Server 11 SP2 LTSS

SUSE Linux Enterprise Server 11 SP1 LTSS

https://www.suse.com/security/cve/CVE-2014-0076.html

https://www.suse.com/security/cve/CVE-2014-0221.html

https://www.suse.com/security/cve/CVE-2014-0224.html

https://www.suse.com/security/cve/CVE-2014-3470.html

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0761-1
Rating: critical

Topics%20covered

Topics Covered

security advisory security issue update critical OpenSSL Denial of Service SUSE Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.