File _patchinfo of Package patchinfo
<patchinfo> <category>security</category> <rating>important</rating> <packager>mkubecek</packager> <summary>Security update for libopenssl0_9_8</summary> <description> This update for libopenssl0_9_8 fixes the following issues: - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation "CacheBleed" (bsc#968050) - bsc#976943: Buffer overrun in ASN1_parse and updates the package to version 0.9.8zh which collects many other fixes, including security ones. </description> <issue tracker="cve" id="2015-3197"/> <issue tracker="cve" id="2016-0702"/> <issue tracker="cve" id="2016-0797"/> <issue tracker="cve" id="2016-0799"/> <issue tracker="cve" id="2016-0800"/> <issue tracker="cve" id="2016-2105"/> <issue tracker="cve" id="2016-2106"/> <issue tracker="cve" id="2016-2108"/> <issue tracker="cve" id="2016-2109"/> <issue tracker="bnc" id="968046"/> <issue tracker="bnc" id="968374"/> <issue tracker="bnc" id="968048"/> <issue tracker="bnc" id="968050"/> <issue tracker="bnc" id="963415"/> <issue tracker="bnc" id="976942"/> <issue tracker="bnc" id="976943"/> <issue tracker="bnc" id="977614"/> <issue tracker="bnc" id="977615"/> <issue tracker="bnc" id="977617"/> </patchinfo>