SUSE-SU-403

Dashboard / Vulnerabilities / SUSE-SU-403

SUSE-SU-403

Summary: Security update for OpenSSL

Details: This OpenSSL update fixes the following issues: * Session Ticket Memory Leak (CVE-2014-3567) * Build option no-ssl3 is incomplete (CVE-2014-3568) * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE) Security Issues: * CVE-2014-3567 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567> * CVE-2014-3566 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566> * CVE-2014-3568 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

References: https://www.suse.com/support/update/announcement//suse-su-403/, https://bugzilla.suse.com/608666, https://bugzilla.suse.com/629905, https://bugzilla.suse.com/651003, https://bugzilla.suse.com/657663, https://bugzilla.suse.com/670526, https://bugzilla.suse.com/693027, https://bugzilla.suse.com/716144, https://bugzilla.suse.com/739719, https://bugzilla.suse.com/742821, https://bugzilla.suse.com/743344, https://bugzilla.suse.com/748738, https://bugzilla.suse.com/749210, https://bugzilla.suse.com/749213, https://bugzilla.suse.com/749735, https://bugzilla.suse.com/751946, https://bugzilla.suse.com/751977, https://bugzilla.suse.com/755395, https://bugzilla.suse.com/758060, https://bugzilla.suse.com/761324, https://bugzilla.suse.com/761838, https://bugzilla.suse.com/767256, https://bugzilla.suse.com/768097, https://bugzilla.suse.com/779952, https://bugzilla.suse.com/802648, https://bugzilla.suse.com/802746, https://bugzilla.suse.com/859228, https://bugzilla.suse.com/859924, https://bugzilla.suse.com/860332, https://bugzilla.suse.com/862181, https://bugzilla.suse.com/869945, https://bugzilla.suse.com/870192, https://bugzilla.suse.com/879179, https://bugzilla.suse.com/880891, https://bugzilla.suse.com/890764, https://bugzilla.suse.com/890767, https://bugzilla.suse.com/890768, https://bugzilla.suse.com/890769, https://bugzilla.suse.com/890770, https://bugzilla.suse.com/892403, https://bugzilla.suse.com/901223, https://bugzilla.suse.com/901277, https://bugzilla.suse.com/912014, https://bugzilla.suse.com/912015, https://bugzilla.suse.com/912018, https://bugzilla.suse.com/912293, https://bugzilla.suse.com/912294, https://bugzilla.suse.com/912296, https://bugzilla.suse.com/915976, https://bugzilla.suse.com/919648, https://bugzilla.suse.com/920236, https://bugzilla.suse.com/922488, https://bugzilla.suse.com/922496, https://bugzilla.suse.com/922499, https://bugzilla.suse.com/922500, https://bugzilla.suse.com/922501, https://bugzilla.suse.com/929678, https://bugzilla.suse.com/931698, https://bugzilla.suse.com/933898, https://bugzilla.suse.com/933911, https://bugzilla.suse.com/934487, https://bugzilla.suse.com/934489, https://bugzilla.suse.com/934491, https://bugzilla.suse.com/934493, https://www.suse.com/security/cve/CVE-2006-7250, https://www.suse.com/security/cve/CVE-2009-5146, https://www.suse.com/security/cve/CVE-2010-2939, https://www.suse.com/security/cve/CVE-2010-3864, https://www.suse.com/security/cve/CVE-2010-4180, https://www.suse.com/security/cve/CVE-2011-0014, https://www.suse.com/security/cve/CVE-2011-1945, https://www.suse.com/security/cve/CVE-2011-3210, https://www.suse.com/security/cve/CVE-2011-4108, https://www.suse.com/security/cve/CVE-2011-4109, https://www.suse.com/security/cve/CVE-2011-4576, https://www.suse.com/security/cve/CVE-2011-4577, https://www.suse.com/security/cve/CVE-2011-4619, https://www.suse.com/security/cve/CVE-2011-5095, https://www.suse.com/security/cve/CVE-2012-0050, https://www.suse.com/security/cve/CVE-2012-0884, https://www.suse.com/security/cve/CVE-2012-1165, https://www.suse.com/security/cve/CVE-2012-2110, https://www.suse.com/security/cve/CVE-2012-2333, https://www.suse.com/security/cve/CVE-2013-0166, https://www.suse.com/security/cve/CVE-2013-0169, https://www.suse.com/security/cve/CVE-2014-0076, https://www.suse.com/security/cve/CVE-2014-0221, https://www.suse.com/security/cve/CVE-2014-0224, https://www.suse.com/security/cve/CVE-2014-3470, https://www.suse.com/security/cve/CVE-2014-3505, https://www.suse.com/security/cve/CVE-2014-3506, https://www.suse.com/security/cve/CVE-2014-3507, https://www.suse.com/security/cve/CVE-2014-3508, https://www.suse.com/security/cve/CVE-2014-3510, https://www.suse.com/security/cve/CVE-2014-3513, https://www.suse.com/security/cve/CVE-2014-3566, https://www.suse.com/security/cve/CVE-2014-3567, https://www.suse.com/security/cve/CVE-2014-3568, https://www.suse.com/security/cve/CVE-2014-3570, https://www.suse.com/security/cve/CVE-2014-3571, https://www.suse.com/security/cve/CVE-2014-3572, https://www.suse.com/security/cve/CVE-2014-8275, https://www.suse.com/security/cve/CVE-2015-0204, https://www.suse.com/security/cve/CVE-2015-0205, https://www.suse.com/security/cve/CVE-2015-0209, https://www.suse.com/security/cve/CVE-2015-0286, https://www.suse.com/security/cve/CVE-2015-0287, https://www.suse.com/security/cve/CVE-2015-0288, https://www.suse.com/security/cve/CVE-2015-0289, https://www.suse.com/security/cve/CVE-2015-0292, https://www.suse.com/security/cve/CVE-2015-0293, https://www.suse.com/security/cve/CVE-2015-1788, https://www.suse.com/security/cve/CVE-2015-1789, https://www.suse.com/security/cve/CVE-2015-1790, https://www.suse.com/security/cve/CVE-2015-1791, https://www.suse.com/security/cve/CVE-2015-1792, https://www.suse.com/security/cve/CVE-2015-3216, https://www.suse.com/security/cve/CVE-2015-4000