Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:0980-1

Опубликовано: 11 апр. 2017
Источник: suse-cvrf

Описание

Security update for slrn

This update for slrn contains one security improvement:

  • CVE-2014-3566: Disable SSLv3 to prevent POODLE attack (boo#1031023)

The version 1.0.3 also contains a number of display and message processing improvements.

Список пакетов

openSUSE Leap 42.1
slrn-1.0.3-4.3.1
slrn-lang-1.0.3-4.3.1
openSUSE Leap 42.2
slrn-1.0.3-4.3.1
slrn-lang-1.0.3-4.3.1

Ссылки

Описание

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

Затронутые продукты
openSUSE Leap 42.1:slrn-1.0.3-4.3.1
openSUSE Leap 42.1:slrn-lang-1.0.3-4.3.1
openSUSE Leap 42.2:slrn-1.0.3-4.3.1
openSUSE Leap 42.2:slrn-lang-1.0.3-4.3.1
Ссылки