- Home
- CVEs with nessus.description==This update for openssl fixes the following issues: Security issues
fixed :
- CVE-2016-7056: ECSDA P-256 timing attack key recovery
(bsc#1019334)
- CVE-2017-3731: Truncated packet could crash via OOB read
(bsc#1022085)
- CVE-2016-8610: remote denial of service in SSL alert
handling (bsc#1005878)
- CVE-2017-3735: Malformed X.509 IPAdressFamily could
cause OOB read (bsc#1056058) Bug fixes :
- support alternate root ca chains (bsc#1032261)
- X509_get_default_cert_file() returns an incorrect path
(bsc#1022271)
- Segmentation fault in 'openssl speed' when engine
library file cannot be found (bsc#1000677)
- adjust DEFAULT_SUSE to meet 1.0.2 and current state
(bsc#1027908)
- Missing important ciphers in openssl 1.0.1i-47.1 on
SLES12 SP1 (bsc#990592)
- out of bounds read crash in DES_fcrypt (bsc#1065363)
- tracker bug for January 26th 2017 release (bsc#1021641)
- patch for CVE-2016-2108 fails negative zero exploit
(bsc#1001502)
- Birthday attacks on 64-bit block ciphers aka triple-des
(SWEET32) (bsc#1001912)
- Include additional patch for CVE-2016-2108 (bsc#1004499)
- openssl DEFAULT_SUSE cipher list is missing ECDHE-ECDSA
ciphers (bsc#1055825)
Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top