FlawAtlas
Search the atlas
SUSE-SU-2015:2251-1 Not scored

Security update for compat-openssl097g

This update for compat-openssl097g fixes the following issues: Security issue fixed: - CVE-2015-3195: When presented with a malformed X509_ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS#7 and CMS routines so any application which reads PKCS#7 or CMS data from untrusted sources is affected. SSL/TLS is not affected. (bsc#957812) A non security issue fixed: - Prevent segfault in s_client with invalid options (bsc#952099)

Exploit probability Not scored
Published December 10, 2015
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Desktop 11 SP3 compat-openssl097g
SUSE:Linux Enterprise Desktop 11 SP4 compat-openssl097g
SUSE:Linux Enterprise Server for SAP Applications 11 SP2 compat-openssl097g
SUSE:Linux Enterprise Server for SAP Applications 11 SP3 compat-openssl097g
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 compat-openssl097g

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2015:2251-1

This update for compat-openssl097g fixes the following issues: Security issue fixed: - CVE-2015-3195: When presented with a malformed X509_ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS#7 and CMS routines so any application which reads PKCS#7 or CMS data from untrusted sources is affected. SSL/TLS is not affected. (bsc#957812) A non security issue fixed: - Prevent segfault in s_client with invalid options (bsc#952099)

View original source

05 / REFERENCES

Further evidence