Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE: Critical OpenSSL Buffer Management and Security Updates 2016:2394-2

suse
Calendar Grey September 27, 2016
Scroller Suse
Vital SUSE security patch for openssl addresses several vulnerabilities, such as memory leaks and Denial of Service incidents.
An update that solves 11 vulnerabilities and has 6 fixes is An update that solves 11 vulnerabilities and has 6 fixes is An update that solves 11 vulnerabilities and has 6 fixes is ...

Summary

This update for openssl fixes the following issues: OpenSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: High * OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666) Severity: Low * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575) * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249) * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844) * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419) * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749) * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819) * Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359) * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)

Topics%20covered

Topics Covered

security advisory DoS important SUSE openssl memory growth

References

#979475 #982575 #982745 #983249 #988591 #990419

#993819 #994749 #994844 #995075 #995324 #995359

#995377 #998190 #999665 #999666 #999668

Cross- CVE-2016-2177 CVE-2016-2178 CVE-2016-2179

CVE-2016-2180 CVE-2016-2181 CVE-2016-2182

CVE-2016-2183 CVE-2016-6302 CVE-2016-6303

CVE-2016-6304 CVE-2016-6306

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP1

SUSE Linux Enterprise Server 12-SP1

SUSE Linux Enterprise Desktop 12-SP1

https://www.suse.com/security/cve/CVE-2016-2177.html

https://www.suse.com/security/cve/CVE-2016-2178.html

https://www.suse.com/security/cve/CVE-2016-2179.html

https://www.suse.com/security/cve/CVE-2016-2180.html

https://www.suse.com/security/cve/CVE-2016-2181.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:2394-1
Rating: important

Topics%20covered

Topics Covered

security advisory DoS important SUSE openssl memory growth

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.