Search the atlas

SUSE-SU-403 Not scored

Security update for OpenSSL

This OpenSSL update fixes the following issues: * Session Ticket Memory Leak (CVE-2014-3567) * Build option no-ssl3 is incomplete (CVE-2014-3568) * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE) Security Issues: * CVE-2014-3567 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567> * CVE-2014-3566 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566> * CVE-2014-3568 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Exploit probability Not scored

Published October 24, 2014

Required by Not available

Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Desktop 12 libqt4

SUSE:Linux Enterprise Server for SAP Applications 12 libqt4-devel-doc

SUSE:Linux Enterprise Server for SAP Applications 12 libqt4-sql-plugins

SUSE:Linux Enterprise Workstation Extension 12 SP1 libqt4

SUSE:Linux Enterprise Workstation Extension 12 SP1 libqt4-sql-plugins

SUSE:Linux Enterprise Desktop 12 libqt4-sql-plugins

SUSE:Linux Enterprise Desktop 12 SP1 libqt4

SUSE:Linux Enterprise Desktop 12 SP1 libqt4-sql-plugins

SUSE:Linux Enterprise Server 12 libqt4

SUSE:Linux Enterprise Server 12 libqt4-devel-doc

SUSE:Linux Enterprise Server 12 libqt4-sql-plugins

SUSE:Linux Enterprise Server 12 SP1 libqt4

SUSE:Linux Enterprise Server 12 SP1 libqt4-devel-doc

SUSE:Linux Enterprise Server 12 SP1 libqt4-sql-plugins

SUSE:Linux Enterprise Server for SAP Applications 12 libqt4

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 libqt4

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 libqt4-devel-doc

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 libqt4-sql-plugins

SUSE:Linux Enterprise Software Development Kit 12 libqt4

SUSE:Linux Enterprise Software Development Kit 12 libqt4-devel-doc

SUSE:Linux Enterprise Software Development Kit 12 libqt4-sql-plugins

SUSE:Linux Enterprise Software Development Kit 12 SP1 libqt4

SUSE:Linux Enterprise Software Development Kit 12 SP1 libqt4-devel-doc

SUSE:Linux Enterprise Software Development Kit 12 SP1 libqt4-sql-plugins

SUSE:Linux Enterprise Workstation Extension 12 libqt4

SUSE:Linux Enterprise Workstation Extension 12 libqt4-sql-plugins

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2006-7250

related CVE-2009-5146

related CVE-2010-2939

related CVE-2010-3864

related CVE-2010-4180

related CVE-2011-0014

related CVE-2011-1945

related CVE-2011-3210

related CVE-2011-4108

related CVE-2011-4109

related CVE-2011-4576

related CVE-2011-4577

related CVE-2011-4619

related CVE-2011-5095

related CVE-2012-0050

related CVE-2012-0884

related CVE-2012-1165

related CVE-2012-2110

related CVE-2012-2333

related CVE-2013-0166

related CVE-2013-0169

related CVE-2014-0076

related CVE-2014-0221

related CVE-2014-0224

related CVE-2014-3470

related CVE-2014-3505

related CVE-2014-3506

related CVE-2014-3507

related CVE-2014-3508

related CVE-2014-3510

related CVE-2014-3513

related CVE-2014-3566

related CVE-2014-3567

related CVE-2014-3568

related CVE-2014-3570

related CVE-2014-3571

related CVE-2014-3572

related CVE-2014-8275

related CVE-2015-0204

related CVE-2015-0205

related CVE-2015-0209

related CVE-2015-0286

related CVE-2015-0287

related CVE-2015-0288

related CVE-2015-0289

related CVE-2015-0292

related CVE-2015-0293

related CVE-2015-1788

related CVE-2015-1789

related CVE-2015-1790

related CVE-2015-1791

related CVE-2015-1792

related CVE-2015-3216

related CVE-2015-4000

upstream CVE-2006-7250

upstream CVE-2009-5146

upstream CVE-2010-2939

upstream CVE-2010-3864

upstream CVE-2010-4180

upstream CVE-2011-0014

upstream CVE-2011-1945

upstream CVE-2011-3210

upstream CVE-2011-4108

upstream CVE-2011-4109

upstream CVE-2011-4576

upstream CVE-2011-4577

upstream CVE-2011-4619

upstream CVE-2011-5095

upstream CVE-2012-0050

upstream CVE-2012-0884

upstream CVE-2012-1165

upstream CVE-2012-2110

upstream CVE-2012-2333

upstream CVE-2013-0166

upstream CVE-2013-0169

upstream CVE-2014-0076

upstream CVE-2014-0221

upstream CVE-2014-0224

upstream CVE-2014-3470

upstream CVE-2014-3505

upstream CVE-2014-3506

upstream CVE-2014-3507

upstream CVE-2014-3508

upstream CVE-2014-3510

upstream CVE-2014-3513

upstream CVE-2014-3566

upstream CVE-2014-3567

upstream CVE-2014-3568

upstream CVE-2014-3570

upstream CVE-2014-3571

upstream CVE-2014-3572

upstream CVE-2014-8275

upstream CVE-2015-0204

upstream CVE-2015-0205

upstream CVE-2015-0209

upstream CVE-2015-0286

upstream CVE-2015-0287

upstream CVE-2015-0288

upstream CVE-2015-0289

upstream CVE-2015-0292

upstream CVE-2015-0293

upstream CVE-2015-1788

upstream CVE-2015-1789

upstream CVE-2015-1790

upstream CVE-2015-1791

upstream CVE-2015-1792

upstream CVE-2015-3216

upstream CVE-2015-4000

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-403

This OpenSSL update fixes the following issues: * Session Ticket Memory Leak (CVE-2014-3567) * Build option no-ssl3 is incomplete (CVE-2014-3568) * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE) Security Issues: * CVE-2014-3567 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567> * CVE-2014-3566 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566> * CVE-2014-3568 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

View original source

05 / REFERENCES

Further evidence