openSUSE-SU-403 Forbidden-1 (critical): openssl: security update

25 Mar 2011

      openSUSE Security Update: openssl: security update
______________________________________________________________________________

Announcement ID:    openSUSE-SU-403 Forbidden-1
Rating:             critical
References:         #670526 #680771 
Cross-References:   CVE-2011-0014
Affected Products:
                    openSUSE 11.4
                    openSUSE 11.3
                    openSUSE 11.2
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available. It includes four new package versions.

Description:

   This update improves the ClientHello handshake message
   parsing function. Prior to this update is was possible that
   this function reads beyond the end of a message leading to
   invalid memory access and a crash. Under some circumstances
   it was possible that information from the OCSP extensions
   was disclosed. (CVE-2011-0014: CVSS v2 Base Score: 5.8
   (AV:N/AC:M/Au:N/C:P/I:N/A:P))

Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 11.4:

      zypper in -t patch mozilla-js192-4203 seamonkey-4204

   - openSUSE 11.3:

      zypper in -t patch MozillaFirefox-4201 libopenssl-devel-3937 mozilla-xulrunner191-4202 seamonkey-4204

   - openSUSE 11.2:

      zypper in -t patch MozillaFirefox-4201 libopenssl-devel-3937 mozilla-xulrunner191-4202 seamonkey-4204

   To bring your system up-to-date, use "zypper patch".

Package List:

   - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.16 and 2.0.13]:

      mozilla-js192-1.9.2.16-0.2.1
      mozilla-xulrunner192-1.9.2.16-0.2.1
      mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1
      mozilla-xulrunner192-devel-1.9.2.16-0.2.1
      mozilla-xulrunner192-gnome-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1
      seamonkey-2.0.13-0.2.1
      seamonkey-dom-inspector-2.0.13-0.2.1
      seamonkey-irc-2.0.13-0.2.1
      seamonkey-translations-common-2.0.13-0.2.1
      seamonkey-translations-other-2.0.13-0.2.1
      seamonkey-venkman-2.0.13-0.2.1

   - openSUSE 11.4 (x86_64) [New Version: 1.9.2.16]:

      mozilla-js192-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1

   - openSUSE 11.3 (i586 x86_64) [New Version: 1.9.1.18,1.9.2.16,2.0.13 and 3.6.16]:

      MozillaFirefox-3.6.16-0.2.1
      MozillaFirefox-branding-upstream-3.6.16-0.2.1
      MozillaFirefox-translations-common-3.6.16-0.2.1
      MozillaFirefox-translations-other-3.6.16-0.2.1
      libopenssl-devel-1.0.0-6.7.1
      libopenssl0_9_8-0.9.8m-3.3.2
      libopenssl1_0_0-1.0.0-6.7.1
      mozilla-js192-1.9.2.16-0.2.1
      mozilla-xulrunner191-1.9.1.18-0.2.1
      mozilla-xulrunner191-devel-1.9.1.18-0.2.1
      mozilla-xulrunner191-gnomevfs-1.9.1.18-0.2.1
      mozilla-xulrunner191-translations-common-1.9.1.18-0.2.1
      mozilla-xulrunner191-translations-other-1.9.1.18-0.2.1
      mozilla-xulrunner192-1.9.2.16-0.2.1
      mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1
      mozilla-xulrunner192-devel-1.9.2.16-0.2.1
      mozilla-xulrunner192-gnome-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1
      openssl-1.0.0-6.7.1
      python-xpcom191-1.9.1.18-0.2.1
      seamonkey-2.0.13-0.2.1
      seamonkey-dom-inspector-2.0.13-0.2.1
      seamonkey-irc-2.0.13-0.2.1
      seamonkey-translations-common-2.0.13-0.2.1
      seamonkey-translations-other-2.0.13-0.2.1
      seamonkey-venkman-2.0.13-0.2.1

   - openSUSE 11.3 (x86_64) [New Version: 1.9.1.18 and 1.9.2.16]:

      libopenssl0_9_8-32bit-0.9.8m-3.3.2
      libopenssl1_0_0-32bit-1.0.0-6.7.1
      mozilla-js192-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner191-32bit-1.9.1.18-0.2.1
      mozilla-xulrunner191-gnomevfs-32bit-1.9.1.18-0.2.1
      mozilla-xulrunner192-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1

   - openSUSE 11.3 (noarch):

      openssl-doc-1.0.0-6.7.1

   - openSUSE 11.2 (i586 x86_64) [New Version: 1.9.1.18,1.9.2.16,2.0.13 and 3.6.16]:

      MozillaFirefox-3.6.16-0.2.1
      MozillaFirefox-branding-upstream-3.6.16-0.2.1
      MozillaFirefox-translations-common-3.6.16-0.2.1
      MozillaFirefox-translations-other-3.6.16-0.2.1
      libopenssl-devel-0.9.8k-3.14.1
      libopenssl0_9_8-0.9.8k-3.14.1
      mozilla-js192-1.9.2.16-0.2.1
      mozilla-xulrunner191-1.9.1.18-0.2.1
      mozilla-xulrunner191-devel-1.9.1.18-0.2.1
      mozilla-xulrunner191-gnomevfs-1.9.1.18-0.2.1
      mozilla-xulrunner191-translations-common-1.9.1.18-0.2.1
      mozilla-xulrunner191-translations-other-1.9.1.18-0.2.1
      mozilla-xulrunner192-1.9.2.16-0.2.1
      mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1
      mozilla-xulrunner192-devel-1.9.2.16-0.2.1
      mozilla-xulrunner192-gnome-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1
      openssl-0.9.8k-3.14.1
      openssl-doc-0.9.8k-3.14.1
      python-xpcom191-1.9.1.18-0.2.1
      seamonkey-2.0.13-0.2.1
      seamonkey-dom-inspector-2.0.13-0.2.1
      seamonkey-irc-2.0.13-0.2.1
      seamonkey-venkman-2.0.13-0.2.1

   - openSUSE 11.2 (x86_64) [New Version: 1.9.1.18 and 1.9.2.16]:

      libopenssl0_9_8-32bit-0.9.8k-3.14.1
      mozilla-js192-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner191-32bit-1.9.1.18-0.2.1
      mozilla-xulrunner191-gnomevfs-32bit-1.9.1.18-0.2.1
      mozilla-xulrunner192-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1
      mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1

References:

   http://support.novell.com/security/cve/CVE-2011-0014.html
   https://bugzilla.novell.com/670526
   https://bugzilla.novell.com/680771

openSUSE-SU-403 Forbidden-1 (critical): openssl: security update

opensuse-security＠opensuse.org