SUSE-SU-2015:0182-2

Details

Description of the patch:

This compat-openssl097g rollup update contains various security fixes:

* CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL
  can result in memory corruption during buffer management operations.

Security Issue reference:

* CVE-2012-2110
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110>

Affected Packages

compat-openssl097g

SUSE Linux Enterprise Server for SAP Applications 11 SP1

Fixed in:

0.9.7g-146.22.1

compat-openssl097g-32bit

SUSE Linux Enterprise Server for SAP Applications 11 SP1

Fixed in:

0.9.7g-146.22.1

References(47)

ADVISORY

https://bugzilla.suse.com/758060

ADVISORY

https://bugzilla.suse.com/802184

ADVISORY

https://bugzilla.suse.com/880891

ADVISORY

https://bugzilla.suse.com/890764

ADVISORY

https://bugzilla.suse.com/901223

ADVISORY

https://bugzilla.suse.com/901277

ADVISORY

https://bugzilla.suse.com/905106

ADVISORY

https://bugzilla.suse.com/912014

ADVISORY

https://bugzilla.suse.com/912015

ADVISORY

https://bugzilla.suse.com/912018

ADVISORY

https://bugzilla.suse.com/912293

ADVISORY

https://bugzilla.suse.com/912296

ADVISORY

https://bugzilla.suse.com/920236

ADVISORY

https://bugzilla.suse.com/922488

ADVISORY

https://bugzilla.suse.com/922496

ADVISORY

https://bugzilla.suse.com/922499

ADVISORY

https://bugzilla.suse.com/922500

ADVISORY

https://bugzilla.suse.com/922501

ADVISORY

https://bugzilla.suse.com/929678

ADVISORY

https://bugzilla.suse.com/931698

ADVISORY

https://bugzilla.suse.com/934489

ADVISORY

https://bugzilla.suse.com/934491

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2015-February/001246.html

ADVISORY

https://www.suse.com/security/cve/CVE-2012-2110/

ADVISORY

https://www.suse.com/security/cve/CVE-2013-0166/