Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

SUSE: 2015:1143-1 Important: OpenSSL Fixes for Multiple Threats

suse
Calendar Grey June 25, 2015
Scroller Suse
SUSE releases critical patch for libcurl, addressing various vulnerabilities and strengthening overall defense.
An update that solves 7 vulnerabilities and has two fixes An update that solves 7 vulnerabilities and has two fixes An update that solves 7 vulnerabilities and has two fixes is now...

Summary

This update of openssl fixes the following security issues: - CVE-2015-4000 (bsc#931698) * The Logjam Attack / weakdh.org * reject connections with DH parameters shorter than 1024 bits * generates 2048-bit DH parameters by default - CVE-2015-1788 (bsc#934487) * Malformed ECParameters causes infinite loop - CVE-2015-1789 (bsc#934489) * Exploitable out-of-bounds read in X509_cmp_time - CVE-2015-1790 (bsc#934491) * PKCS7 crash with missing EnvelopedContent - CVE-2015-1792 (bsc#934493) * CMS verify infinite loop with unknown hash function - CVE-2015-1791 (bsc#933911) * race condition in NewSessionTicket - CVE-2015-3216 (bsc#933898) * Crash in ssleay_rand_bytes due to locking regression - fix a timing side channel in RSA decryption (bnc#929678) Patch Instructions:

Topics%20covered

Topics Covered

security advisory software update important openssl SUSE Linux

References

#926597 #929678 #931698 #933898 #933911 #934487

#934489 #934491 #934493

Cross- CVE-2015-1788 CVE-2015-1789 CVE-2015-1790

CVE-2015-1791 CVE-2015-1792 CVE-2015-3216

CVE-2015-4000

Affected Products:

SUSE Linux Enterprise Software Development Kit 12

SUSE Linux Enterprise Server 12

SUSE Linux Enterprise Desktop 12

https://www.suse.com/security/cve/CVE-2015-1788.html

https://www.suse.com/security/cve/CVE-2015-1789.html

https://www.suse.com/security/cve/CVE-2015-1790.html

https://www.suse.com/security/cve/CVE-2015-1791.html

https://www.suse.com/security/cve/CVE-2015-1792.html

https://www.suse.com/security/cve/CVE-2015-3216.html

https://www.suse.com/security/cve/CVE-2015-4000.html

https://bugzilla.suse.com/show_bug.cgi?id=926597

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2015:1143-1
Rating: important

Topics%20covered

Topics Covered

security advisory software update important openssl SUSE Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.