Hello community, here is the log from the commit of package patchinfo.4635 for openSUSE:13.1:Update checked in at 2016-05-05 09:43:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.1:Update/patchinfo.4635 (Old) and /work/SRC/openSUSE:13.1:Update/.patchinfo.4635.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.4635" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo> <category>security</category> <rating>important</rating> <packager>mkubecek</packager> <summary>Security update for libopenssl0_9_8</summary> <description> This update for libopenssl0_9_8 fixes the following issues: - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation "CacheBleed" (bsc#968050) - bsc#976943: Buffer overrun in ASN1_parse and updates the package to version 0.9.8zh which collects many other fixes, including security ones. </description> <issue tracker="cve" id="2015-3197"/> <issue tracker="cve" id="2016-0702"/> <issue tracker="cve" id="2016-0797"/> <issue tracker="cve" id="2016-0799"/> <issue tracker="cve" id="2016-0800"/> <issue tracker="cve" id="2016-2105"/> <issue tracker="cve" id="2016-2106"/> <issue tracker="cve" id="2016-2108"/> <issue tracker="cve" id="2016-2109"/> <issue tracker="bnc" id="968046"/> <issue tracker="bnc" id="968374"/> <issue tracker="bnc" id="968048"/> <issue tracker="bnc" id="968050"/> <issue tracker="bnc" id="963415"/> <issue tracker="bnc" id="976942"/> <issue tracker="bnc" id="976943"/> <issue tracker="bnc" id="977614"/> <issue tracker="bnc" id="977615"/> <issue tracker="bnc" id="977617"/> </patchinfo>