Security update for compat-openssl097g
This update for compat-openssl097g fixes the following issues: Security issues fixed: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) Bugs fixed: - bsc#976943: Fix buffer overrun in ASN1_parse
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for compat-openssl097g fixes the following issues: Security issues fixed: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) Bugs fixed: - bsc#976943: Fix buffer overrun in ASN1_parse
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/976942
- https://bugzilla.suse.com/976943
- https://bugzilla.suse.com/977615
- https://bugzilla.suse.com/977617
- https://www.suse.com/security/cve/CVE-2016-2105
- https://www.suse.com/security/cve/CVE-2016-2106
- https://www.suse.com/security/cve/CVE-2016-2108
- https://www.suse.com/security/cve/CVE-2016-2109
- https://www.suse.com/support/update/announcement/2016/suse-su-20161231-1/