Security update for openssl
This update for openssl fixes the following issues: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check (bsc#977616) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - bsc#976943: Buffer overrun in ASN1_parse - bsc#977621: Preserve negotiated digests for SNI (bsc#977621) - bsc#958501: Fix openssl enc -non-fips-allow option in FIPS mode (bsc#958501)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for openssl fixes the following issues: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check (bsc#977616) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - bsc#976943: Buffer overrun in ASN1_parse - bsc#977621: Preserve negotiated digests for SNI (bsc#977621) - bsc#958501: Fix openssl enc -non-fips-allow option in FIPS mode (bsc#958501)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/958501
- https://bugzilla.suse.com/976942
- https://bugzilla.suse.com/976943
- https://bugzilla.suse.com/977614
- https://bugzilla.suse.com/977615
- https://bugzilla.suse.com/977616
- https://bugzilla.suse.com/977617
- https://bugzilla.suse.com/977621
- https://www.suse.com/security/cve/CVE-2016-2105
- https://www.suse.com/security/cve/CVE-2016-2106
- https://www.suse.com/security/cve/CVE-2016-2107
- https://www.suse.com/security/cve/CVE-2016-2108
- https://www.suse.com/security/cve/CVE-2016-2109
- https://www.suse.com/support/update/announcement/2016/suse-su-20161228-1/