Security update for openssl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:1290-1 Final 1 1 2016-05-12T14:57:49Z current 2016-05-12T14:57:49Z 2016-05-12T14:57:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openssl This update for openssl fixes the following issues: Security issues fixed: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation 'CacheBleed' (bsc#968050) Bugs fixed: - fate#320304: build 32bit devel package - bsc#976943: Fix buffer overrun in ASN1_parse - bsc#973223: allow weak DH groups, vulnerable to the logjam attack, when environment variable OPENSSL_ALLOW_LOGJAM_ATTACK is set - bsc#889013: Rename README.SuSE to the new spelling The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-openssl-12557,sleclo50sp3-openssl-12557,sleman21-openssl-12557,slemap21-openssl-12557,slessp2-openssl-12557,slessp3-openssl-12557,slessp4-openssl-12557,slestso13-openssl-12557 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20161290-1/ Link for SUSE-SU-2016:1290-1 https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html E-Mail link for SUSE-SU-2016:1290-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/889013 SUSE Bug 889013 https://bugzilla.suse.com/968050 SUSE Bug 968050 https://bugzilla.suse.com/976942 SUSE Bug 976942 https://bugzilla.suse.com/976943 SUSE Bug 976943 https://bugzilla.suse.com/977614 SUSE Bug 977614 https://bugzilla.suse.com/977615 SUSE Bug 977615 https://bugzilla.suse.com/977617 SUSE Bug 977617 https://www.suse.com/security/cve/CVE-2016-0702/ SUSE CVE CVE-2016-0702 page https://www.suse.com/security/cve/CVE-2016-2105/ SUSE CVE CVE-2016-2105 page https://www.suse.com/security/cve/CVE-2016-2106/ SUSE CVE CVE-2016-2106 page https://www.suse.com/security/cve/CVE-2016-2108/ SUSE CVE CVE-2016-2108 page https://www.suse.com/security/cve/CVE-2016-2109/ SUSE CVE CVE-2016-2109 page SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Manager 2.1 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 5 SUSE Studio Onsite 1.3 libopenssl-devel-0.9.8j-0.97.1 libopenssl-devel-32bit-0.9.8j-0.97.1 libopenssl0_9_8-0.9.8j-0.97.1 libopenssl0_9_8-32bit-0.9.8j-0.97.1 libopenssl0_9_8-hmac-0.9.8j-0.97.1 libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 openssl-0.9.8j-0.97.1 openssl-doc-0.9.8j-0.97.1 libopenssl0_9_8-x86-0.9.8j-0.97.1 libopenssl-devel-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libopenssl0_9_8-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libopenssl0_9_8-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libopenssl0_9_8-hmac-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS openssl-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS openssl-doc-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libopenssl-devel-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libopenssl0_9_8-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libopenssl0_9_8-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libopenssl0_9_8-hmac-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS openssl-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS openssl-doc-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libopenssl-devel-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libopenssl0_9_8-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libopenssl0_9_8-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libopenssl0_9_8-hmac-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA openssl-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA openssl-doc-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libopenssl0_9_8-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP4 libopenssl0_9_8-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP4 libopenssl0_9_8-hmac-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP4 libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP4 libopenssl0_9_8-x86-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP4 openssl-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP4 openssl-doc-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server 11 SP4 libopenssl0_9_8-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libopenssl0_9_8-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libopenssl0_9_8-hmac-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libopenssl0_9_8-x86-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 openssl-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 openssl-doc-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libopenssl-devel-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libopenssl-devel-32bit-0.9.8j-0.97.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libopenssl-devel-0.9.8j-0.97.1 as a component of SUSE Manager 2.1 libopenssl0_9_8-0.9.8j-0.97.1 as a component of SUSE Manager 2.1 libopenssl0_9_8-32bit-0.9.8j-0.97.1 as a component of SUSE Manager 2.1 libopenssl0_9_8-hmac-0.9.8j-0.97.1 as a component of SUSE Manager 2.1 libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 as a component of SUSE Manager 2.1 openssl-0.9.8j-0.97.1 as a component of SUSE Manager 2.1 openssl-doc-0.9.8j-0.97.1 as a component of SUSE Manager 2.1 libopenssl-devel-0.9.8j-0.97.1 as a component of SUSE Manager Proxy 2.1 libopenssl0_9_8-0.9.8j-0.97.1 as a component of SUSE Manager Proxy 2.1 libopenssl0_9_8-32bit-0.9.8j-0.97.1 as a component of SUSE Manager Proxy 2.1 libopenssl0_9_8-hmac-0.9.8j-0.97.1 as a component of SUSE Manager Proxy 2.1 libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 as a component of SUSE Manager Proxy 2.1 openssl-0.9.8j-0.97.1 as a component of SUSE Manager Proxy 2.1 openssl-doc-0.9.8j-0.97.1 as a component of SUSE Manager Proxy 2.1 libopenssl-devel-0.9.8j-0.97.1 as a component of SUSE OpenStack Cloud 5 libopenssl0_9_8-0.9.8j-0.97.1 as a component of SUSE OpenStack Cloud 5 libopenssl0_9_8-32bit-0.9.8j-0.97.1 as a component of SUSE OpenStack Cloud 5 libopenssl0_9_8-hmac-0.9.8j-0.97.1 as a component of SUSE OpenStack Cloud 5 libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 as a component of SUSE OpenStack Cloud 5 openssl-0.9.8j-0.97.1 as a component of SUSE OpenStack Cloud 5 openssl-doc-0.9.8j-0.97.1 as a component of SUSE OpenStack Cloud 5 libopenssl-devel-0.9.8j-0.97.1 as a component of SUSE Studio Onsite 1.3 The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a "CacheBleed" attack. CVE-2016-0702 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-doc-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.97.1 SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.97.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161290-1/ https://www.suse.com/security/cve/CVE-2016-0702.html CVE-2016-0702 https://bugzilla.suse.com/1007806 SUSE Bug 1007806 https://bugzilla.suse.com/968044 SUSE Bug 968044 https://bugzilla.suse.com/968050 SUSE Bug 968050 https://bugzilla.suse.com/971238 SUSE Bug 971238 https://bugzilla.suse.com/990370 SUSE Bug 990370 Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data. CVE-2016-2105 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-doc-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.97.1 SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.97.1 low 3.3 AV:L/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161290-1/ https://www.suse.com/security/cve/CVE-2016-2105.html CVE-2016-2105 https://bugzilla.suse.com/977584 SUSE Bug 977584 https://bugzilla.suse.com/977614 SUSE Bug 977614 https://bugzilla.suse.com/978492 SUSE Bug 978492 https://bugzilla.suse.com/989902 SUSE Bug 989902 https://bugzilla.suse.com/990369 SUSE Bug 990369 https://bugzilla.suse.com/990370 SUSE Bug 990370 Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data. CVE-2016-2106 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-doc-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.97.1 SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.97.1 low 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161290-1/ https://www.suse.com/security/cve/CVE-2016-2106.html CVE-2016-2106 https://bugzilla.suse.com/977584 SUSE Bug 977584 https://bugzilla.suse.com/977615 SUSE Bug 977615 https://bugzilla.suse.com/978492 SUSE Bug 978492 https://bugzilla.suse.com/979279 SUSE Bug 979279 https://bugzilla.suse.com/990369 SUSE Bug 990369 The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negative zero" issue. CVE-2016-2108 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-doc-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.97.1 SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.97.1 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161290-1/ https://www.suse.com/security/cve/CVE-2016-2108.html CVE-2016-2108 https://bugzilla.suse.com/1001502 SUSE Bug 1001502 https://bugzilla.suse.com/1004499 SUSE Bug 1004499 https://bugzilla.suse.com/1005878 SUSE Bug 1005878 https://bugzilla.suse.com/1148697 SUSE Bug 1148697 https://bugzilla.suse.com/977584 SUSE Bug 977584 https://bugzilla.suse.com/977617 SUSE Bug 977617 https://bugzilla.suse.com/978492 SUSE Bug 978492 https://bugzilla.suse.com/989345 SUSE Bug 989345 https://bugzilla.suse.com/996067 SUSE Bug 996067 The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding. CVE-2016-2109 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.97.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.97.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-0.9.8j-0.97.1 SUSE Manager 2.1:openssl-doc-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-0.9.8j-0.97.1 SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-0.9.8j-0.97.1 SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.97.1 SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.97.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161290-1/ https://www.suse.com/security/cve/CVE-2016-2109.html CVE-2016-2109 https://bugzilla.suse.com/1015243 SUSE Bug 1015243 https://bugzilla.suse.com/976942 SUSE Bug 976942 https://bugzilla.suse.com/977584 SUSE Bug 977584 https://bugzilla.suse.com/978492 SUSE Bug 978492 https://bugzilla.suse.com/990369 SUSE Bug 990369