Recommended update for compat-openssl098

SUSE Recommended Update: Recommended update for compat-openssl098
Announcement ID: SUSE-RU-2015:1980-1
Rating: moderate
References: #947833
Affected Products:
  • SUSE Linux Enterprise Module for Legacy Software 12
  • SUSE Linux Enterprise Desktop 12

  • An update that has one recommended fix can now be installed.

    Description:


    OpenSSL was updated to fix a bug in TLS session renegotiation.

    This renegotiation is for instance used with Apache2 client certificate
    handling, which would fail if ECDHE key exchange is used, which is
    happening more often after the last openssl update.

    Patch Instructions:

    To install this SUSE Recommended Update use YaST online_update.
    Alternatively you can run the command listed for your product:

    • SUSE Linux Enterprise Module for Legacy Software 12:
      zypper in -t patch SUSE-SLE-Module-Legacy-12-2015-836=1
    • SUSE Linux Enterprise Desktop 12:
      zypper in -t patch SUSE-SLE-DESKTOP-12-2015-836=1

    To bring your system up-to-date, use "zypper patch".

    Package List:

    • SUSE Linux Enterprise Module for Legacy Software 12 (s390x x86_64):
      • compat-openssl098-debugsource-0.9.8j-84.3
      • libopenssl0_9_8-0.9.8j-84.3
      • libopenssl0_9_8-32bit-0.9.8j-84.3
      • libopenssl0_9_8-debuginfo-0.9.8j-84.3
      • libopenssl0_9_8-debuginfo-32bit-0.9.8j-84.3
    • SUSE Linux Enterprise Desktop 12 (x86_64):
      • compat-openssl098-debugsource-0.9.8j-84.3
      • libopenssl0_9_8-0.9.8j-84.3
      • libopenssl0_9_8-32bit-0.9.8j-84.3
      • libopenssl0_9_8-debuginfo-0.9.8j-84.3
      • libopenssl0_9_8-debuginfo-32bit-0.9.8j-84.3

    References: