FlawAtlas
Search the atlas
SUSE-SU-2015:2275-1 Not scored

Security update for openssl

This update for openssl fixes the following issues: - CVE-2015-3195: When presented with a malformed X509_ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS#7 and CMS routines so any application which reads PKCS#7 or CMS data from untrusted sources is affected. SSL/TLS is not affected. (bsc#957812) - Prevent segfault in s_client with invalid options (bsc#952099)

Exploit probability Not scored
Published December 15, 2015
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Software Development Kit 11 SP4 openssl
SUSE:Linux Enterprise Desktop 11 SP3 openssl
SUSE:Linux Enterprise Desktop 11 SP4 openssl
SUSE:Linux Enterprise Server 11 SP2-LTSS openssl
SUSE:Linux Enterprise Server 11 SP3 openssl
SUSE:Linux Enterprise Server 11 SP3-TERADATA openssl
SUSE:Linux Enterprise Server 11 SP4 openssl
SUSE:Linux Enterprise Server for SAP Applications 11 SP3 openssl
SUSE:Linux Enterprise Server for SAP Applications 11 SP4 openssl
SUSE:Linux Enterprise Software Development Kit 11 SP3 openssl
SUSE:Studio Onsite 1.3 openssl

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2015:2275-1

This update for openssl fixes the following issues: - CVE-2015-3195: When presented with a malformed X509_ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS#7 and CMS routines so any application which reads PKCS#7 or CMS data from untrusted sources is affected. SSL/TLS is not affected. (bsc#957812) - Prevent segfault in s_client with invalid options (bsc#952099)

View original source

05 / REFERENCES

Further evidence