Security update for libressl
This libressl update to version 2.2.7 fixes the following issues:
Security issues fixed:
- Fix multiple vulnerabilities in libcrypto relating to ASN.1 and encoding. [boo#978492, boo#977584]
- CVE-2015-3194: Certificate verify crash with missing PSS parameter (boo#957815)
- CVE-2015-3195: X509_ATTRIBUTE memory leak (boo#957812)
- CVE-2015-5333: Memory Leak (boo#950707)
- CVE-2015-5334: Buffer Overflow (boo#950708)
-
Submitted by
Jan Engelhardt (jengelh)
Fixed bugs
bnc#977584
VUL-0: [TRACKERBUG] openssl: 2016-05-03 security releases
bnc#978492
VUL-0: libressl: 2016-05-03 security releases
bnc#957815
VUL-0: CVE-2015-3194: openssl: Certificate verify crash with missing PSS parameter
bnc#957812
VUL-0: CVE-2015-3195: openssl: X509_ATTRIBUTE memory leak
bnc#950707
VUL-0: CVE-2015-5333: libressl: Memory Leak
bnc#950708
VUL-0: CVE-2015-5334: libressl: Buffer Overflow
