Уведомление безопасности SUSE-SA:2006:058

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

SUSE

openssl (any) openssl-32bit (any) openssl-devel (any) openssl-devel-32bit (any)

Уведомление безопасности об уязвимостях Novell Linux Desktop 9, Novell Linux POS 9, Open Enterprise Server, SUSE LINUX 10.1, SUSE LINUX 10.0, SUSE LINUX 9.3, SUSE LINUX 9.2, SuSE Linux Desktop 1.0, SuSE Linux Enterprise Server 8, SuSE Linux Openexchange Server 4, SUSE LINUX Retail Solution 8, SuSE Linux School Server, SuSE Linux Standard Server 8, SUSE SLED 10, SUSE SLES 10, SUSE SLES 9, UnitedLinux 1.0

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 10.0:
i586:
openssl-devel - 0.9.7g-2.10
openssl - 0.9.7g-2.10
openSUSE 10.1:
i586:
openssl-devel - 0.9.8a-18.10
openssl - 0.9.8a-18.10
SUSE Linux Enterprise Desktop 10, SUSE Linux Enterprise Server 10:
x86_64:
openssl - 0.9.8a-18.10
openssl-32bit - 0.9.8a-18.10
openssl-devel - 0.9.8a-18.10
openssl-devel-32bit - 0.9.8a-18.10
SUSE LINUX Desktop 1.0:
i586:
openssl - 0.9.6g-139
SUSE Linux Enterprise Server 9:
s390x:
openssl - 0.9.7d-15.29
openssl-32bit - 9-200609270843
openssl-devel - 0.9.7d-15.29
openssl-devel-32bit - 9-200609270843
SUSE Linux Enterprise Server 10:
s390x:
openssl - 0.9.8a-18.10
openssl-32bit - 0.9.8a-18.10
openssl-devel - 0.9.8a-18.10
openssl-devel-32bit - 0.9.8a-18.10
openSUSE 9.3:
i586:
openssl-devel - 0.9.7e-3.6
openssl - 0.9.7e-3.6
openSUSE 9.2:
i586:
openssl - 0.9.7d-25.6
openssl-devel - 0.9.7d-25.6
SUSE LINUX Enterprise Server 8:
s390x:
openssl - 0.9.6g-139
openssl-devel - 0.9.6g-139
Novell Open Enterprise Server (OES), Novell Linux Desktop 9, SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
x86_64:
openssl - 0.9.7d-15.29
openssl-32bit - 9-200609270654
openssl-devel - 0.9.7d-15.29
openssl-devel-32bit - 9-200609270654
SUSE LINUX Standard Server 8, SUSE LINUX Enterprise Server 8, SUSE LINUX Openexchange Server 4.0, SUSE LINUX Retail Solution 8:
x86_64:
openssl - 0.9.6g-138
openssl-devel - 0.9.6g-138

https://www.suse.com/support/security/advisories/2006_58_openssl.html

Источник: CVE
Наименование: CVE-2006-2940
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2940

Источник: CVE
Наименование: CVE-2006-3738
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3738

Источник: CVE
Наименование: CVE-2006-2937
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2937

Источник: CVE
Наименование: CVE-2006-4343
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4343