openSUSE Recommended Update: openssl update to version 1.0.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0249-1 Rating: moderate References: #670526 #720601 #784994 #793420 #802184 #803004 #849377 #856687 #857203 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves four vulnerabilities and has 5 fixes is now available. Description: This update lifts the openssl library to version 1.0.1 which contains new features such as protocol support for TLSv1.1 and TLSv1.2 and more improvements. The patch also contains a rebuild of openssh to reflect the version change dependency (actually a bug in openssh to consider the version). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-17 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libopenssl-devel-1.0.1e-53.1 libopenssl1_0_0-1.0.1e-53.1 libopenssl1_0_0-debuginfo-1.0.1e-53.1 openssh-5.8p1-7.2 openssh-askpass-5.8p1-7.2 openssh-askpass-debuginfo-5.8p1-7.2 openssh-askpass-gnome-5.8p1-7.1 openssh-askpass-gnome-debuginfo-5.8p1-7.1 openssh-debuginfo-5.8p1-7.2 openssh-debugsource-5.8p1-7.2 openssl-1.0.1e-53.1 openssl-debuginfo-1.0.1e-53.1 openssl-debugsource-1.0.1e-53.1 - openSUSE 11.4 (x86_64): libopenssl-devel-32bit-1.0.1e-53.1 libopenssl1_0_0-32bit-1.0.1e-53.1 libopenssl1_0_0-debuginfo-32bit-1.0.1e-53.1 - openSUSE 11.4 (noarch): openssl-doc-1.0.1e-53.1 - openSUSE 11.4 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.1e-53.1 libopenssl1_0_0-x86-1.0.1e-53.1 References: http://support.novell.com/security/cve/CVE-2011-0014.html http://support.novell.com/security/cve/CVE-2012-4929.html http://support.novell.com/security/cve/CVE-2013-6449.html http://support.novell.com/security/cve/CVE-2013-6450.html https://bugzilla.novell.com/670526 https://bugzilla.novell.com/720601 https://bugzilla.novell.com/784994 https://bugzilla.novell.com/793420 https://bugzilla.novell.com/802184 https://bugzilla.novell.com/803004 https://bugzilla.novell.com/849377 https://bugzilla.novell.com/856687 https://bugzilla.novell.com/857203