Stay Secure with the Latest Linux Advisories

security advisoryopensslimportant update

SUSE: 2014:1409-1 Important: OpenSSL TLS Fixes and Updates

An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.. SUSE Security Update: Security update for OpenSSL ______________________________________________________________________________ Announcement ID: SUSE-SU-2014:1409-1 Rating: important References: #901223 #901277 Cross-References: CVE-2014-3566 CVE-2014-3568 Affected Products: SLE CLIENT TOOLS 10 for x86_64 SLE CLIENT TOOLS 10 for s390x SLE CLIENT TOOLS 10 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This OpenSSL update fixes the following issues: * Build option no-ssl3 is incomplete (CVE-2014-3568) * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE) Security Issues: * CVE-2014-3566 * CVE-2014-3568 Indications: Everybody should update. Package List: - SLE CLIENT TOOLS 10 for x86_64 (x86_64): openssl-0.9.8a-18.86.2 openssl-32bit-0.9.8a-18.86.2 - SLE CLIENT TOOLS 10 for s390x (s390x): openssl-0.9.8a-18.86.2 openssl-32bit-0.9.8a-18.86.2 - SLE CLIENT TOOLS 10 (i586): openssl-0.9.8a-18.86.2 References: https://www.suse.com/security/cve/CVE-2014-3566.html https://www.suse.com/security/cve/CVE-2014-3568.html https://bugzilla.suse.com/show_bug.cgi?id=901223 https://bugzilla.suse.com/show_bug.cgi?id=901277 https://scc.suse.com:443/patches/ . Essential SUSE patch for OpenSSL resolves a pair of significant vulnerabilities in client software, calling for prompt attention.. Suse Update, OpenSSL Security, TLS Mitigation. . Severity: Important. LinuxSecurity.com Team

Nov 12, 2014 •Important SuSE