Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

SUSE: 2017:2968-1 Important: OpenSSL1 OOB Read Issue Fix

suse
Calendar Grey November 10, 2017
Dist Suse Esm H88
Crucial SUSE patch for openssl1 addresses a significant OOB read vulnerability, alongside multiple bug corrections and enhancements to the system.
An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now...

Summary

This update for openssl1 fixes the following issues: Security issues fixed: - CVE-2017-3735: Malformed X.509 IPAdressFamily could cause OOB read (bsc#1056058) - adjust DEFAULT_SUSE to meet 1.0.2 and current state (bsc#1027908) - out of bounds read+crash in DES_fcrypt (bsc#1065363) - DEFAULT_SUSE cipher list is missing ECDHE-ECDSA ciphers (bsc#1055825) - Missing important ciphers in openssl 1.0.1i-47.1 (bsc#990592) Bug fixes: - support alternate root ca chains (bsc#1032261) - Require openssl1, so c_rehash1 is available during %post to hash the certificates (bsc#1057660) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SECURITY: zypper in -t patch secsp3-openssl1-13343=1

Topics%20covered

Topics Covered

security advisory system update bug fixes openssl SUSE Linux OOB read issue

References

#1027908 #1032261 #1055825 #1056058 #1057660

#1065363 #990592

Cross- CVE-2017-3735

Affected Products:

SUSE Linux Enterprise Server 11-SECURITY

https://www.suse.com/security/cve/CVE-2017-3735.html

https://bugzilla.suse.com/1027908

https://bugzilla.suse.com/1032261

https://bugzilla.suse.com/1055825

https://bugzilla.suse.com/1056058

https://bugzilla.suse.com/1057660

https://bugzilla.suse.com/1065363

https://bugzilla.suse.com/990592

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2968-1
Rating: important

Topics%20covered

Topics Covered

security advisory system update bug fixes openssl SUSE Linux OOB read issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.