Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation 'CacheBleed' (bsc#968050) - bsc#976943: Buffer overrun in ASN1_parse The following non-security bugs were fixed: - bsc#889013: Rename README.SuSE to the new spelling (bsc#889013)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for compat-openssl098 fixes the following issues: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation 'CacheBleed' (bsc#968050) - bsc#976943: Buffer overrun in ASN1_parse The following non-security bugs were fixed: - bsc#889013: Rename README.SuSE to the new spelling (bsc#889013)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/889013
- https://bugzilla.suse.com/968050
- https://bugzilla.suse.com/976942
- https://bugzilla.suse.com/976943
- https://bugzilla.suse.com/977614
- https://bugzilla.suse.com/977615
- https://bugzilla.suse.com/977617
- https://www.suse.com/security/cve/CVE-2016-0702
- https://www.suse.com/security/cve/CVE-2016-2105
- https://www.suse.com/security/cve/CVE-2016-2106
- https://www.suse.com/security/cve/CVE-2016-2108
- https://www.suse.com/security/cve/CVE-2016-2109
- https://www.suse.com/support/update/announcement/2016/suse-su-20161267-1/