Security update for openssl1
This OpenSSL update fixes the following issues: * SRTP Memory Leak (CVE-2014-3513) * Session Ticket Memory Leak (CVE-2014-3567) * Build option no-ssl3 is incomplete (CVE-2014-3568) * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE) Security Issues: * CVE-2014-3513 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513> * CVE-2014-3567 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567> * CVE-2014-3566 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566> * CVE-2014-3568 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This OpenSSL update fixes the following issues: * SRTP Memory Leak (CVE-2014-3513) * Session Ticket Memory Leak (CVE-2014-3567) * Build option no-ssl3 is incomplete (CVE-2014-3568) * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE) Security Issues: * CVE-2014-3513 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513> * CVE-2014-3567 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567> * CVE-2014-3566 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566> * CVE-2014-3568 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/860332
- https://bugzilla.suse.com/861014
- https://bugzilla.suse.com/864912
- https://bugzilla.suse.com/869945
- https://bugzilla.suse.com/872299
- https://bugzilla.suse.com/873351
- https://bugzilla.suse.com/876282
- https://bugzilla.suse.com/880891
- https://bugzilla.suse.com/889812
- https://bugzilla.suse.com/890764
- https://bugzilla.suse.com/890767
- https://bugzilla.suse.com/890768
- https://bugzilla.suse.com/890769
- https://bugzilla.suse.com/890770
- https://bugzilla.suse.com/901223
- https://bugzilla.suse.com/901277
- https://bugzilla.suse.com/906878
- https://bugzilla.suse.com/912014
- https://bugzilla.suse.com/912015
- https://bugzilla.suse.com/912018
- https://bugzilla.suse.com/912292
- https://bugzilla.suse.com/912293
- https://bugzilla.suse.com/912294
- https://bugzilla.suse.com/912296
- https://bugzilla.suse.com/919648
- https://bugzilla.suse.com/920236
- https://bugzilla.suse.com/922488
- https://bugzilla.suse.com/922496
- https://bugzilla.suse.com/922499
- https://bugzilla.suse.com/922500
- https://bugzilla.suse.com/922501
- https://bugzilla.suse.com/923384
- https://bugzilla.suse.com/929678
- https://bugzilla.suse.com/931698
- https://bugzilla.suse.com/933911
- https://bugzilla.suse.com/934487
- https://bugzilla.suse.com/934489
- https://bugzilla.suse.com/934491
- https://bugzilla.suse.com/934493
- https://bugzilla.suse.com/934494
- https://www.suse.com/security/cve/CVE-2010-5298
- https://www.suse.com/security/cve/CVE-2014-0160
- https://www.suse.com/security/cve/CVE-2014-0195
- https://www.suse.com/security/cve/CVE-2014-0198
- https://www.suse.com/security/cve/CVE-2014-0221
- https://www.suse.com/security/cve/CVE-2014-0224
- https://www.suse.com/security/cve/CVE-2014-3470
- https://www.suse.com/security/cve/CVE-2014-3505
- https://www.suse.com/security/cve/CVE-2014-3506
- https://www.suse.com/security/cve/CVE-2014-3507
- https://www.suse.com/security/cve/CVE-2014-3508
- https://www.suse.com/security/cve/CVE-2014-3509
- https://www.suse.com/security/cve/CVE-2014-3510
- https://www.suse.com/security/cve/CVE-2014-3511
- https://www.suse.com/security/cve/CVE-2014-3512
- https://www.suse.com/security/cve/CVE-2014-3513
- https://www.suse.com/security/cve/CVE-2014-3566
- https://www.suse.com/security/cve/CVE-2014-3567
- https://www.suse.com/security/cve/CVE-2014-3568
- https://www.suse.com/security/cve/CVE-2014-3570
- https://www.suse.com/security/cve/CVE-2014-3571
- https://www.suse.com/security/cve/CVE-2014-3572
- https://www.suse.com/security/cve/CVE-2014-5139
- https://www.suse.com/security/cve/CVE-2014-8176
- https://www.suse.com/security/cve/CVE-2014-8275
- https://www.suse.com/security/cve/CVE-2015-0204
- https://www.suse.com/security/cve/CVE-2015-0205
- https://www.suse.com/security/cve/CVE-2015-0206
- https://www.suse.com/security/cve/CVE-2015-0209
- https://www.suse.com/security/cve/CVE-2015-0286
- https://www.suse.com/security/cve/CVE-2015-0287
- https://www.suse.com/security/cve/CVE-2015-0288
- https://www.suse.com/security/cve/CVE-2015-0289
- https://www.suse.com/security/cve/CVE-2015-0292
- https://www.suse.com/security/cve/CVE-2015-0293
- https://www.suse.com/security/cve/CVE-2015-1788
- https://www.suse.com/security/cve/CVE-2015-1789
- https://www.suse.com/security/cve/CVE-2015-1790
- https://www.suse.com/security/cve/CVE-2015-1791
- https://www.suse.com/security/cve/CVE-2015-1792
- https://www.suse.com/security/cve/CVE-2015-4000
- https://www.suse.com/support/update/announcement/2015/suse-su-20150546-1/