----------------------------------------------------------------------

Did you know that a change in our assessment rating, exploit code
availability, or if an updated patch is released by the vendor, is
not part of this mailing-list?

Click here to learn more:
http://secunia.com/advisories/business_solutions/

----------------------------------------------------------------------

TITLE:
SUSE update for openssl

SECUNIA ADVISORY ID:
SA33659

VERIFY ADVISORY:
http://secunia.com/advisories/33659/

CRITICAL:
Moderately critical

IMPACT:
Spoofing

WHERE:
>From remote

OPERATING SYSTEM:
openSUSE 10.3
http://secunia.com/advisories/product/16124/
openSUSE 11.0
http://secunia.com/advisories/product/19180/
openSUSE 11.1
http://secunia.com/advisories/product/20823/
SUSE Linux Enterprise Server 9
http://secunia.com/advisories/product/4118/
SUSE Linux Enterprise Server 10
http://secunia.com/advisories/product/12192/

SOFTWARE:
Novell Open Enterprise Server 1.x
http://secunia.com/advisories/product/4664/

DESCRIPTION:
SUSE has issued an update for openssl. This fixes a vulnerability,
which can be exploited by malicious people to conduct spoofing
attacks.

For more information:
SA33338

SOLUTION:
Apply updated packages.

x86 Platform:

openSUSE 11.1:

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/libopenssl-devel-0.9.8h-28.7.1.i586.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/libopenssl0_9_8-0.9.8h-28.7.1.i586.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/openssl-0.9.8h-28.7.1.i586.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/i586/openssl-doc-0.9.8h-28.7.1.i586.rpm

openSUSE 11.0:

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/libopenssl-devel-0.9.8g-47.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/libopenssl0_9_8-0.9.8g-47.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/openssl-0.9.8g-47.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/openssl-certs-0.9.8g-47.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/i586/openssl-doc-0.9.8g-47.2.i586.rpm

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libopenssl-devel-0.9.8e-45.7.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libopenssl0_9_8-0.9.8e-45.7.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/openssl-0.9.8e-45.7.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/openssl-certs-0.9.8e-45.7.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/openssl-doc-0.9.8e-45.7.i586.rpm

Platform Independent:

openSUSE 11.1:

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/noarch/openssl-certs-0.9.8h-1.1.noarch.rpm

Power PC Platform:

openSUSE 11.1:

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/ppc/libopenssl-devel-0.9.8h-28.7.1.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/ppc/libopenssl0_9_8-0.9.8h-28.7.1.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/ppc/libopenssl0_9_8-64bit-0.9.8h-28.7.1.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/ppc/openssl-0.9.8h-28.7.1.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/ppc/openssl-doc-0.9.8h-28.7.1.ppc.rpm

openSUSE 11.0:

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/libopenssl-devel-0.9.8g-47.2.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/libopenssl0_9_8-0.9.8g-47.2.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/libopenssl0_9_8-64bit-0.9.8g-47.2.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/openssl-0.9.8g-47.2.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/openssl-certs-0.9.8g-47.2.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/ppc/openssl-doc-0.9.8g-47.2.ppc.rpm

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libopenssl-devel-0.9.8e-45.7.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libopenssl0_9_8-0.9.8e-45.7.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libopenssl0_9_8-64bit-0.9.8e-45.7.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/openssl-0.9.8e-45.7.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/openssl-certs-0.9.8e-45.7.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/openssl-doc-0.9.8e-45.7.ppc.rpm

x86-64 Platform:

openSUSE 11.1:

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/x86_64/libopenssl-devel-0.9.8h-28.7.1.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/x86_64/libopenssl0_9_8-0.9.8h-28.7.1.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/x86_64/libopenssl0_9_8-32bit-0.9.8h-28.7.1.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/x86_64/openssl-0.9.8h-28.7.1.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/x86_64/openssl-doc-0.9.8h-28.7.1.x86_64.rpm

openSUSE 11.0:

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/libopenssl-devel-0.9.8g-47.2.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/libopenssl0_9_8-0.9.8g-47.2.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/libopenssl0_9_8-32bit-0.9.8g-47.2.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/openssl-0.9.8g-47.2.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/openssl-certs-0.9.8g-47.2.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/x86_64/openssl-doc-0.9.8g-47.2.x86_64.rpm

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libopenssl-devel-0.9.8e-45.7.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libopenssl0_9_8-0.9.8e-45.7.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libopenssl0_9_8-32bit-0.9.8e-45.7.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/openssl-0.9.8e-45.7.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/openssl-certs-0.9.8e-45.7.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/openssl-doc-0.9.8e-45.7.x86_64.rpm

Sources:

openSUSE 11.1:

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/src/openssl-0.9.8h-28.7.1.src.rpm

http://download.opensuse.org/pub/opensuse/update/11.1/rpm/src/openssl-certs-0.9.8h-1.1.src.rpm

openSUSE 11.0:

http://download.opensuse.org/pub/opensuse/update/11.0/rpm/src/openssl-0.9.8g-47.2.src.rpm

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/openssl-0.9.8e-45.7.src.rpm

SUSE Linux Enterprise Server 10 SP2

http://download.novell.com/index.jsp?search=Search&keywords=11f6326cece4b234f5ca1844cb648dbd

SLE SDK 10 SP2

http://download.novell.com/index.jsp?search=Search&keywords=11f6326cece4b234f5ca1844cb648dbd

SUSE Linux Enterprise 10 SP2 DEBUGINFO

http://download.novell.com/index.jsp?search=Search&keywords=11f6326cece4b234f5ca1844cb648dbd

SUSE Linux Enterprise Desktop 10 SP2

http://download.novell.com/index.jsp?search=Search&keywords=11f6326cece4b234f5ca1844cb648dbd

Open Enterprise Server

http://download.novell.com/index.jsp?search=Search&keywords=0a0c29d2fa5ecac3cdf58a731bb7cd9a

Novell Linux POS 9

http://download.novell.com/index.jsp?search=Search&keywords=0a0c29d2fa5ecac3cdf58a731bb7cd9a

Novell Linux Desktop 9

http://download.novell.com/index.jsp?search=Search&keywords=0a0c29d2fa5ecac3cdf58a731bb7cd9a

SUSE SLES 9

http://download.novell.com/index.jsp?search=Search&keywords=0a0c29d2fa5ecac3cdf58a731bb7cd9a

SuSE Linux Enterprise Server 8

http://download.novell.com/index.jsp?search=Search&keywords=d105c9b195233c76b8132c1231f03b9d

ORIGINAL ADVISORY:
SUSE-SA:2009:006:
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00008.html

OTHER REFERENCES:
SA33338:
http://secunia.com/advisories/33338/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------