[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250363

 
 

909

 
 

196124

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2017:0441-1 -- SLES openssl, libopenssl-devel, libopenssl1_0_0

ID: oval:org.secpod.oval:def:89044816Date: (C)2021-07-20   (M)2024-01-29
Class: PATCHFamily: unix




This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] Security issues fixed: - CVE-2016-7055: The x86_64 optimized montgomery multiplication may produce incorrect results - CVE-2017-3731: Truncated packet could crash via OOB read - CVE-2017-3732: BN_mod_exp may produce incorrect results on x86_64 - Degrade the 3DES cipher to MEDIUM in SSLv2 Non-security issues fixed: - fix crash in openssl speed - fix X509_CERT_FILE path - AES XTS key parts must not be identical in FIPS mode

Platform:
SUSE Linux Enterprise Server 12 SP2
Product:
openssl
libopenssl-devel
libopenssl1_0_0
Reference:
SUSE-SU-2017:0441-1
CVE-2016-7055
CVE-2017-3731
CVE-2017-3732
CVE    3
CVE-2016-7055
CVE-2017-3732
CVE-2017-3731
CPE    14
cpe:/a:openssl:openssl:1.0.2
cpe:/a:openssl:openssl:1.0.2:beta3
cpe:/a:openssl:openssl:1.0.2:beta1
cpe:/a:openssl:openssl:1.0.2:beta2
...

© SecPod Technologies