CVE-2016-8610

Upstream information

CVE-2016-8610 at MITRE

Description

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
	National Vulnerability Database	SUSE
Base Score	5	4.3
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P	AV:N/AC:M/Au:N/C:N/I:N/A:P
Access Vector	Network	Network
Access Complexity	Low	Medium
Authentication	None	None
Confidentiality Impact	None	None
Integrity Impact	None	None
Availability Impact	Partial	Partial

CVSS v3 Scores
	National Vulnerability Database
Base Score	7.5
Vector	AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Access Vector	Network
Access Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	High

SUSE Bugzilla entries: 1005878 [RESOLVED / FIXED], 1005879 [RESOLVED / FIXED], 1025347 [CONFIRMED], 1120592 [RESOLVED / DUPLICATE], 1126909 [RESOLVED / FIXED], 982575 [RESOLVED / FIXED]

SUSE Security Advisories:

SUSE-SU-2017:0304-1, published Fri, 27 Jan 2017 22:09:56 +0100 (CET)
SUSE-SU-2017:0348-1, published Wed, 1 Feb 2017 12:09:23 +0100 (CET)
SUSE-SU-2017:0461-1, published Tue Feb 14 13:08:35 MST 2017
SUSE-SU-2017:0495-1, published Fri Feb 17 10:23:24 MST 2017
SUSE-SU-2017:0585-1, published Wed Mar 1 13:07:52 MST 2017
SUSE-SU-2017:0601-1, published Fri Mar 3 13:08:29 MST 2017
SUSE-SU-2017:0605-1, published Fri Mar 3 13:13:32 MST 2017
SUSE-SU-2017:2700-1, published Wed, 11 Oct 2017 03:07:32 +0200 (CEST)
SUSE-SU-2018:0112-1, published Tue, 16 Jan 2018 18:08:42 +0100 (CET)
SUSE-SU-2018:3864-1, published Thu Nov 22 13:12:14 MST 2018
SUSE-SU-2018:3864-2, published Sat Apr 27 16:12:16 MDT 2019
SUSE-SU-2018:3964-1, published
SUSE-SU-2018:3994-1, published Thu Dec 6 07:08:58 MST 2018
SUSE-SU-2018:4068-1, published Tue Dec 11 07:08:49 MST 2018
SUSE-SU-2018:4274-1, published Thu Dec 27 04:09:48 MST 2018
SUSE-SU-2019:1553-1, published Tue Jun 18 17:13:57 MDT 2019
openSUSE-SU-2017:0386-1, published Sat, 4 Feb 2017 15:07:24 +0100 (CET)
openSUSE-SU-2017:0487-1, published Fri, 17 Feb 2017 04:19:10 +0100 (CET)
openSUSE-SU-2018:4104-1, published Thu, 13 Dec 2018 03:13:21 +0100 (CET)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 12 SP1	`compat-openssl098 >= 0.9.8j-105.1` `gnutls >= 3.2.15-16.1` `libgnutls28 >= 3.2.15-16.1` `libgnutls28-32bit >= 3.2.15-16.1` `libopenssl0_9_8 >= 0.9.8j-105.1` `libopenssl0_9_8-32bit >= 0.9.8j-105.1` `libopenssl1_0_0 >= 1.0.1i-54.5.1` `libopenssl1_0_0-32bit >= 1.0.1i-54.5.1` `openssl >= 1.0.1i-54.5.1`	Patchnames: SUSE-SLE-DESKTOP-12-SP1-2017-177 SUSE-SLE-DESKTOP-12-SP1-2017-236 SUSE-SLE-DESKTOP-12-SP1-2017-319
SUSE Linux Enterprise Desktop 12 SP2	`compat-openssl098 >= 0.9.8j-105.1` `gnutls >= 3.2.15-16.1` `libgnutls28 >= 3.2.15-16.1` `libgnutls28-32bit >= 3.2.15-16.1` `libopenssl0_9_8 >= 0.9.8j-105.1` `libopenssl0_9_8-32bit >= 0.9.8j-105.1`	Patchnames: SUSE-SLE-DESKTOP-12-SP2-2017-177 SUSE-SLE-DESKTOP-12-SP2-2017-319
SUSE Linux Enterprise Desktop 12 SP3	`compat-openssl098 >= 0.9.8j-106.9.1` `gnutls >= 3.3.27-1.10` `libgnutls28 >= 3.3.27-1.10` `libgnutls28-32bit >= 3.3.27-1.10` `libopenssl0_9_8 >= 0.9.8j-106.9.1` `libopenssl0_9_8-32bit >= 0.9.8j-106.9.1`	Patchnames: SUSE Linux Enterprise Desktop 12 SP3 GA gnutls SUSE Linux Enterprise Desktop 12 SP3 GA libopenssl0_9_8 SUSE-SLE-DESKTOP-12-SP3-2018-2893
SUSE Linux Enterprise Desktop 12 SP4	`compat-openssl098 >= 0.9.8j-106.9.1` `gnutls >= 3.3.27-3.3.1` `libgnutls28 >= 3.3.27-3.3.1` `libgnutls28-32bit >= 3.3.27-3.3.1` `libopenssl0_9_8 >= 0.9.8j-106.9.1` `libopenssl0_9_8-32bit >= 0.9.8j-106.9.1`	Patchnames: SUSE Linux Enterprise Desktop 12 SP4 GA gnutls SUSE Linux Enterprise Desktop 12 SP4 GA libopenssl0_9_8 SUSE-SLE-DESKTOP-12-SP4-2018-2893
SUSE Linux Enterprise High Availability Extension 11 SP4	`gnutls >= 2.4.1-24.39.67.1` `libgnutls-extra26 >= 2.4.1-24.39.67.1`	Patchnames: slehasp4-gnutls-12957
SUSE Linux Enterprise Module for Basesystem 15	`gnutls >= 3.6.2-4.15` `libgnutls-devel >= 3.6.2-4.15` `libgnutls30 >= 3.6.2-4.15` `libgnutlsxx-devel >= 3.6.2-4.15` `libgnutlsxx28 >= 3.6.2-4.15`	Patchnames: SUSE Linux Enterprise Module for Basesystem 15 GA gnutls
SUSE Linux Enterprise Module for Basesystem 15 SP1	`gnutls >= 3.6.7-6.8.1` `libgnutls-devel >= 3.6.7-6.8.1` `libgnutls30 >= 3.6.7-6.8.1` `libgnutls30-32bit >= 3.6.7-6.8.1` `libgnutlsxx-devel >= 3.6.7-6.8.1` `libgnutlsxx28 >= 3.6.7-6.8.1`	Patchnames: SUSE Linux Enterprise Module for Basesystem 15 SP1 GA gnutls
SUSE Linux Enterprise Module for Containers 12	`sles12sp1-docker-image >= 1.0.7-20171002`	Patchnames: SUSE-SLE-Module-Containers-12-2017-1673
SUSE Linux Enterprise Module for Desktop Applications 15	`libgnutls30-32bit >= 3.6.2-4.15`	Patchnames: SUSE Linux Enterprise Module for Desktop Applications 15 GA libgnutls30-32bit
SUSE Linux Enterprise Module for Legacy Software 12	`compat-openssl098 >= 0.9.8j-106.9.1` `libopenssl0_9_8 >= 0.9.8j-106.9.1` `libopenssl0_9_8-32bit >= 0.9.8j-106.9.1`	Patchnames: SUSE-SLE-Module-Legacy-12-2017-319 SUSE-SLE-Module-Legacy-12-2018-2893
SUSE Linux Enterprise Point of Sale 11 SP3	`libopenssl-devel >= 0.9.8j-0.106.18.1` `libopenssl0_9_8 >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-hmac >= 0.9.8j-0.106.18.1` `openssl >= 0.9.8j-0.106.18.1` `openssl-doc >= 0.9.8j-0.106.18.1`	Patchnames: sleposp3-openssl-12999 sleposp3-openssl-13918
SUSE Linux Enterprise Server 11 SP3-LTSS	`libopenssl-devel >= 0.9.8j-0.106.18.1` `libopenssl0_9_8 >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-32bit >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-hmac >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-hmac-32bit >= 0.9.8j-0.106.18.1` `openssl >= 0.9.8j-0.106.18.1` `openssl-doc >= 0.9.8j-0.106.18.1`	Patchnames: slessp3-openssl-12999 slessp3-openssl-13918
SUSE Linux Enterprise Server 11 SP4	`gnutls >= 2.4.1-24.39.67.1` `libgnutls-extra26 >= 2.4.1-24.39.67.1` `libgnutls26 >= 2.4.1-24.39.67.1` `libgnutls26-32bit >= 2.4.1-24.39.67.1` `libgnutls26-x86 >= 2.4.1-24.39.67.1` `libopenssl0_9_8 >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-32bit >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-hmac >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-hmac-32bit >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-x86 >= 0.9.8j-0.106.18.1` `openssl >= 0.9.8j-0.106.18.1` `openssl-doc >= 0.9.8j-0.106.18.1`	Patchnames: slessp4-gnutls-12957 slessp4-openssl-12999 slessp4-openssl-13918
SUSE Linux Enterprise Server 11-SECURITY	`libopenssl1-devel >= 1.0.1g-0.58.15.1` `libopenssl1_0_0 >= 1.0.1g-0.58.15.1` `libopenssl1_0_0-32bit >= 1.0.1g-0.58.15.1` `libopenssl1_0_0-x86 >= 1.0.1g-0.58.15.1` `openssl1 >= 1.0.1g-0.58.15.1` `openssl1-doc >= 1.0.1g-0.58.15.1`	Patchnames: secsp3-openssl1-12991 secsp3-openssl1-13887
SUSE Linux Enterprise Server 12 SP1	`gnutls >= 3.2.15-16.1` `libgnutls-openssl27 >= 3.2.15-16.1` `libgnutls28 >= 3.2.15-16.1` `libgnutls28-32bit >= 3.2.15-16.1` `libopenssl1_0_0 >= 1.0.1i-54.5.1` `libopenssl1_0_0-32bit >= 1.0.1i-54.5.1` `libopenssl1_0_0-hmac >= 1.0.1i-54.5.1` `libopenssl1_0_0-hmac-32bit >= 1.0.1i-54.5.1` `openssl >= 1.0.1i-54.5.1` `openssl-doc >= 1.0.1i-54.5.1`	Patchnames: SUSE-SLE-SERVER-12-SP1-2017-177 SUSE-SLE-SERVER-12-SP1-2017-236
SUSE Linux Enterprise Server 12 SP1-LTSS	`libopenssl1_0_0 >= 1.0.1i-54.20.1` `libopenssl1_0_0-32bit >= 1.0.1i-54.20.1` `libopenssl1_0_0-hmac >= 1.0.1i-54.20.1` `libopenssl1_0_0-hmac-32bit >= 1.0.1i-54.20.1` `openssl >= 1.0.1i-54.20.1` `openssl-doc >= 1.0.1i-54.20.1`	Patchnames: SUSE-SLE-SERVER-12-SP1-2018-2762
SUSE Linux Enterprise Server 12 SP2	`gnutls >= 3.2.15-16.1` `libgnutls-openssl27 >= 3.2.15-16.1` `libgnutls28 >= 3.2.15-16.1` `libgnutls28-32bit >= 3.2.15-16.1`	Patchnames: SUSE-SLE-SERVER-12-SP2-2017-177
SUSE Linux Enterprise Server 12 SP3	`gnutls >= 3.3.27-1.10` `libgnutls-openssl27 >= 3.3.27-1.10` `libgnutls28 >= 3.3.27-1.10` `libgnutls28-32bit >= 3.3.27-1.10`	Patchnames: SUSE Linux Enterprise Server 12 SP3 GA gnutls
SUSE Linux Enterprise Server 12 SP4	`gnutls >= 3.3.27-3.3.1` `libgnutls-openssl27 >= 3.3.27-3.3.1` `libgnutls28 >= 3.3.27-3.3.1` `libgnutls28-32bit >= 3.3.27-3.3.1`	Patchnames: SUSE Linux Enterprise Server 12 SP4 GA gnutls
SUSE Linux Enterprise Server 12-LTSS	`libopenssl1_0_0 >= 1.0.1i-27.34.1` `libopenssl1_0_0-32bit >= 1.0.1i-27.34.1` `libopenssl1_0_0-hmac >= 1.0.1i-27.34.1` `libopenssl1_0_0-hmac-32bit >= 1.0.1i-27.34.1` `openssl >= 1.0.1i-27.34.1` `openssl-doc >= 1.0.1i-27.34.1`	Patchnames: SUSE-SLE-SERVER-12-2018-79 SUSE-SLE-SERVER-12-2019-1553
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	`gnutls >= 3.2.15-16.1` `libgnutls-openssl27 >= 3.2.15-16.1` `libgnutls28 >= 3.2.15-16.1`	Patchnames: SUSE-SLE-RPI-12-SP2-2017-177
SUSE Linux Enterprise Server for SAP Applications 11 SP3-LTSS	`libopenssl-devel >= 0.9.8j-0.106.18.1` `libopenssl0_9_8 >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-32bit >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-hmac >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-hmac-32bit >= 0.9.8j-0.106.18.1` `openssl >= 0.9.8j-0.106.18.1` `openssl-doc >= 0.9.8j-0.106.18.1`	Patchnames: slessp3-openssl-12999 slessp3-openssl-13918
SUSE Linux Enterprise Server for SAP Applications 11 SP4	`compat-openssl097g >= 0.9.7g-146.22.51.8.1` `compat-openssl097g-32bit >= 0.9.7g-146.22.51.8.1` `gnutls >= 2.4.1-24.39.67.1` `libgnutls-extra26 >= 2.4.1-24.39.67.1` `libgnutls26 >= 2.4.1-24.39.67.1` `libgnutls26-32bit >= 2.4.1-24.39.67.1` `libgnutls26-x86 >= 2.4.1-24.39.67.1` `libopenssl0_9_8 >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-32bit >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-hmac >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-hmac-32bit >= 0.9.8j-0.106.18.1` `libopenssl0_9_8-x86 >= 0.9.8j-0.106.18.1` `openssl >= 0.9.8j-0.106.18.1` `openssl-doc >= 0.9.8j-0.106.18.1`	Patchnames: slesappsp4-compat-openssl097g-13004 slesappsp4-compat-openssl097g-13896 slessp4-gnutls-12957 slessp4-openssl-12999 slessp4-openssl-13918
SUSE Linux Enterprise Server for SAP Applications 11-SECURITY	`libopenssl1-devel >= 1.0.1g-0.58.15.1` `libopenssl1_0_0 >= 1.0.1g-0.58.15.1` `libopenssl1_0_0-32bit >= 1.0.1g-0.58.15.1` `libopenssl1_0_0-x86 >= 1.0.1g-0.58.15.1` `openssl1 >= 1.0.1g-0.58.15.1` `openssl1-doc >= 1.0.1g-0.58.15.1`	Patchnames: secsp3-openssl1-12991 secsp3-openssl1-13887
SUSE Linux Enterprise Server for SAP Applications 12 SP1	`compat-openssl098 >= 0.9.8j-106.9.1` `gnutls >= 3.2.15-16.1` `libgnutls-openssl27 >= 3.2.15-16.1` `libgnutls28 >= 3.2.15-16.1` `libgnutls28-32bit >= 3.2.15-16.1` `libopenssl0_9_8 >= 0.9.8j-106.9.1` `libopenssl1_0_0 >= 1.0.1i-54.20.1` `libopenssl1_0_0-32bit >= 1.0.1i-54.20.1` `libopenssl1_0_0-hmac >= 1.0.1i-54.20.1` `libopenssl1_0_0-hmac-32bit >= 1.0.1i-54.20.1` `openssl >= 1.0.1i-54.20.1` `openssl-doc >= 1.0.1i-54.20.1`	Patchnames: SUSE-SLE-SAP-12-SP1-2017-319 SUSE-SLE-SAP-12-SP1-2018-2893 SUSE-SLE-SAP-12-SP1-2019-1063 SUSE-SLE-SERVER-12-SP1-2017-177 SUSE-SLE-SERVER-12-SP1-2017-236
SUSE Linux Enterprise Server for SAP Applications 12 SP1-LTSS	`libopenssl1_0_0 >= 1.0.1i-54.20.1` `libopenssl1_0_0-32bit >= 1.0.1i-54.20.1` `libopenssl1_0_0-hmac >= 1.0.1i-54.20.1` `libopenssl1_0_0-hmac-32bit >= 1.0.1i-54.20.1` `openssl >= 1.0.1i-54.20.1` `openssl-doc >= 1.0.1i-54.20.1`	Patchnames: SUSE-SLE-SERVER-12-SP1-2018-2762
SUSE Linux Enterprise Server for SAP Applications 12 SP2	`compat-openssl098 >= 0.9.8j-106.9.1` `gnutls >= 3.2.15-16.1` `libgnutls-openssl27 >= 3.2.15-16.1` `libgnutls28 >= 3.2.15-16.1` `libgnutls28-32bit >= 3.2.15-16.1` `libopenssl0_9_8 >= 0.9.8j-106.9.1`	Patchnames: SUSE-SLE-SAP-12-SP2-2017-319 SUSE-SLE-SAP-12-SP2-2018-2893 SUSE-SLE-SERVER-12-SP2-2017-177
SUSE Linux Enterprise Server for SAP Applications 12 SP3	`compat-openssl098 >= 0.9.8j-106.9.1` `libopenssl0_9_8 >= 0.9.8j-106.9.1`	Patchnames: SUSE-SLE-SAP-12-SP3-2018-2893
SUSE Linux Enterprise Server for SAP Applications 12 SP4	`compat-openssl098 >= 0.9.8j-106.9.1` `libopenssl0_9_8 >= 0.9.8j-106.9.1`	Patchnames: SUSE-SLE-SAP-12-SP4-2018-2893
SUSE Linux Enterprise Server for SAP Applications 12-LTSS	`libopenssl1_0_0 >= 1.0.1i-27.34.1` `libopenssl1_0_0-32bit >= 1.0.1i-27.34.1` `libopenssl1_0_0-hmac >= 1.0.1i-27.34.1` `libopenssl1_0_0-hmac-32bit >= 1.0.1i-27.34.1` `openssl >= 1.0.1i-27.34.1` `openssl-doc >= 1.0.1i-27.34.1`	Patchnames: SUSE-SLE-SERVER-12-2018-79 SUSE-SLE-SERVER-12-2019-1553
SUSE Linux Enterprise Software Development Kit 11 SP4	`gnutls >= 2.4.1-24.39.67.1` `libgnutls-devel >= 2.4.1-24.39.67.1` `libgnutls-extra-devel >= 2.4.1-24.39.67.1` `libgnutls-extra26 >= 2.4.1-24.39.67.1` `libopenssl-devel >= 0.9.8j-0.106.18.1` `libopenssl-devel-32bit >= 0.9.8j-0.106.18.1` `openssl >= 0.9.8j-0.106.18.1`	Patchnames: sdksp4-gnutls-12957 sdksp4-openssl-12999 sdksp4-openssl-13918
SUSE Linux Enterprise Software Development Kit 12 SP1	`gnutls >= 3.2.15-16.1` `libgnutls-devel >= 3.2.15-16.1` `libgnutls-openssl-devel >= 3.2.15-16.1` `libgnutlsxx-devel >= 3.2.15-16.1` `libgnutlsxx28 >= 3.2.15-16.1` `libopenssl-devel >= 1.0.1i-54.5.1` `openssl >= 1.0.1i-54.5.1`	Patchnames: SUSE-SLE-SDK-12-SP1-2017-177 SUSE-SLE-SDK-12-SP1-2017-236
SUSE Linux Enterprise Software Development Kit 12 SP2	`gnutls >= 3.2.15-16.1` `libgnutls-devel >= 3.2.15-16.1` `libgnutls-openssl-devel >= 3.2.15-16.1` `libgnutlsxx-devel >= 3.2.15-16.1` `libgnutlsxx28 >= 3.2.15-16.1`	Patchnames: SUSE-SLE-SDK-12-SP2-2017-177
SUSE Linux Enterprise Software Development Kit 12 SP3	`libgnutls-devel >= 3.3.27-1.10` `libgnutls-openssl-devel >= 3.3.27-1.10` `libgnutlsxx-devel >= 3.3.27-1.10` `libgnutlsxx28 >= 3.3.27-1.10`	Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP3 GA libgnutls-devel
SUSE Linux Enterprise Software Development Kit 12 SP4	`libgnutls-devel >= 3.3.27-3.3.1` `libgnutls-openssl-devel >= 3.3.27-3.3.1` `libgnutlsxx-devel >= 3.3.27-3.3.1` `libgnutlsxx28 >= 3.3.27-3.3.1`	Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP4 GA libgnutls-devel
SUSE Manager 2.1	`libopenssl-devel >= 0.9.8j-0.105.1` `libopenssl0_9_8 >= 0.9.8j-0.105.1` `libopenssl0_9_8-32bit >= 0.9.8j-0.105.1` `libopenssl0_9_8-hmac >= 0.9.8j-0.105.1` `libopenssl0_9_8-hmac-32bit >= 0.9.8j-0.105.1` `openssl >= 0.9.8j-0.105.1` `openssl-doc >= 0.9.8j-0.105.1`	Patchnames: sleman21-openssl-12999
SUSE Manager Proxy 2.1	`libopenssl-devel >= 0.9.8j-0.105.1` `libopenssl0_9_8 >= 0.9.8j-0.105.1` `libopenssl0_9_8-32bit >= 0.9.8j-0.105.1` `libopenssl0_9_8-hmac >= 0.9.8j-0.105.1` `libopenssl0_9_8-hmac-32bit >= 0.9.8j-0.105.1` `openssl >= 0.9.8j-0.105.1` `openssl-doc >= 0.9.8j-0.105.1`	Patchnames: slemap21-openssl-12999
SUSE OpenStack Cloud 5	`libopenssl-devel >= 0.9.8j-0.105.1` `libopenssl0_9_8 >= 0.9.8j-0.105.1` `libopenssl0_9_8-32bit >= 0.9.8j-0.105.1` `libopenssl0_9_8-hmac >= 0.9.8j-0.105.1` `libopenssl0_9_8-hmac-32bit >= 0.9.8j-0.105.1` `openssl >= 0.9.8j-0.105.1` `openssl-doc >= 0.9.8j-0.105.1`	Patchnames: sleclo50sp3-openssl-12999
SUSE Studio Onsite 1.3	`libopenssl-devel >= 0.9.8j-0.106.18.1` `openssl >= 0.9.8j-0.106.18.1`	Patchnames: slestso13-openssl-12999 slestso13-openssl-13918
openSUSE Leap 15.0	`gnutls >= 3.6.2-lp150.3.2` `libgnutls-dane0 >= 3.6.2-lp150.3.2` `libgnutls30 >= 3.6.2-lp150.3.2`	Patchnames: openSUSE Leap 15.0 GA gnutls
openSUSE Leap 42.1	`gnutls >= 3.2.15-8.1` `gnutls-debuginfo >= 3.2.15-8.1` `gnutls-debugsource >= 3.2.15-8.1` `libgnutls-devel >= 3.2.15-8.1` `libgnutls-devel-32bit >= 3.2.15-8.1` `libgnutls-openssl-devel >= 3.2.15-8.1` `libgnutls-openssl27 >= 3.2.15-8.1` `libgnutls-openssl27-debuginfo >= 3.2.15-8.1` `libgnutls28 >= 3.2.15-8.1` `libgnutls28-32bit >= 3.2.15-8.1` `libgnutls28-debuginfo >= 3.2.15-8.1` `libgnutls28-debuginfo-32bit >= 3.2.15-8.1` `libgnutlsxx-devel >= 3.2.15-8.1` `libgnutlsxx28 >= 3.2.15-8.1` `libgnutlsxx28-debuginfo >= 3.2.15-8.1` `libopenssl-devel >= 1.0.1i-21.1` `libopenssl-devel-32bit >= 1.0.1i-21.1` `libopenssl1_0_0 >= 1.0.1i-21.1` `libopenssl1_0_0-32bit >= 1.0.1i-21.1` `libopenssl1_0_0-debuginfo >= 1.0.1i-21.1` `libopenssl1_0_0-debuginfo-32bit >= 1.0.1i-21.1` `libopenssl1_0_0-hmac >= 1.0.1i-21.1` `libopenssl1_0_0-hmac-32bit >= 1.0.1i-21.1` `openssl >= 1.0.1i-21.1` `openssl-debuginfo >= 1.0.1i-21.1` `openssl-debugsource >= 1.0.1i-21.1` `openssl-doc >= 1.0.1i-21.1`	Patchnames: openSUSE-2017-207 openSUSE-2017-255
openSUSE Leap 42.2	`gnutls >= 3.2.15-9.1` `gnutls-debuginfo >= 3.2.15-9.1` `gnutls-debugsource >= 3.2.15-9.1` `libgnutls-devel >= 3.2.15-9.1` `libgnutls-devel-32bit >= 3.2.15-9.1` `libgnutls-openssl-devel >= 3.2.15-9.1` `libgnutls-openssl27 >= 3.2.15-9.1` `libgnutls-openssl27-debuginfo >= 3.2.15-9.1` `libgnutls28 >= 3.2.15-9.1` `libgnutls28-32bit >= 3.2.15-9.1` `libgnutls28-debuginfo >= 3.2.15-9.1` `libgnutls28-debuginfo-32bit >= 3.2.15-9.1` `libgnutlsxx-devel >= 3.2.15-9.1` `libgnutlsxx28 >= 3.2.15-9.1` `libgnutlsxx28-debuginfo >= 3.2.15-9.1`	Patchnames: openSUSE-2017-207
openSUSE Leap 42.3	`compat-openssl098 >= 0.9.8j-27.1` `compat-openssl098-debugsource >= 0.9.8j-27.1` `gnutls >= 3.3.27-1.5` `libgnutls-devel >= 3.3.27-1.5` `libgnutls-openssl27 >= 3.3.27-1.5` `libgnutls28 >= 3.3.27-1.5` `libgnutls28-32bit >= 3.3.27-1.5` `libopenssl0_9_8 >= 0.9.8j-27.1` `libopenssl0_9_8-32bit >= 0.9.8j-27.1` `libopenssl0_9_8-debuginfo >= 0.9.8j-27.1` `libopenssl0_9_8-debuginfo-32bit >= 0.9.8j-27.1`	Patchnames: openSUSE Leap 42.3 GA gnutls openSUSE-2018-1529

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification.

Product(s)	Source package	State
SUSE Linux Enterprise Desktop 11 SP2	compat-openssl097g	Released
SUSE Linux Enterprise Desktop 11 SP2	openssl	Released
SUSE Linux Enterprise Desktop 11 SP3	compat-openssl097g	Released
SUSE Linux Enterprise Desktop 11 SP3	openssl	Released
SUSE Linux Enterprise Desktop 11 SP4	compat-openssl097g	Released
SUSE Linux Enterprise Desktop 11 SP4	openssl	Released
SUSE Linux Enterprise Desktop 12 GA	openssl	Released
SUSE Linux Enterprise Desktop 12 SP1	openssl	Released
SUSE Linux Enterprise SDK 11 SP2	openssl	Released
SUSE Linux Enterprise SDK 11 SP3	openssl	Released
SUSE Linux Enterprise SDK 11 SP4	openssl	Released
SUSE Linux Enterprise SDK 12 GA	openssl	Released
SUSE Linux Enterprise SDK 12 SP1	openssl	Released
SUSE Linux Enterprise Server 10 SP4 LTSS	compat-openssl097g	Released
SUSE Linux Enterprise Server 10 SP4 LTSS	openssl	Unsupported
SUSE Linux Enterprise Server 11 SP1 LTSS	openssl	Released
SUSE Linux Enterprise Server 11 SP2	openssl	Released
SUSE Linux Enterprise Server 11 SP2 LTSS	openssl	Released
SUSE Linux Enterprise Server 11 SP3	openssl	Released
SUSE Linux Enterprise Server 11 SP3 LTSS	openssl	Released
SUSE Linux Enterprise Server 11 SP4	openssl	Released
SUSE Linux Enterprise Server 11-SECURITY	openssl1	Released
SUSE Linux Enterprise Server 12 GA	openssl	Released
SUSE Linux Enterprise Server 12 GA LTSS	openssl	Released
SUSE Linux Enterprise Server 12 SP1	openssl	Released
SUSE Linux Enterprise Server 12 SP1 LTSS	openssl	Released
SUSE Linux Enterprise Server for SAP AIO 11 SP1	compat-openssl097g	Released
SUSE Linux Enterprise Server for SAP Applications 11 SP2	compat-openssl097g	Released
SUSE Linux Enterprise Server for SAP Applications 11 SP2	openssl	Released
SUSE Linux Enterprise Server for SAP Applications 11 SP3	compat-openssl097g	Released
SUSE Linux Enterprise Server for SAP Applications 11 SP4	compat-openssl097g	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	openssl	Not affected
SUSE Linux Enterprise Server for SAP ES 11 SP1	compat-openssl097g	Released
SUSE Linux Enterprise Server for VMWare 11 SP2	openssl	Released
SUSE Linux Enterprise Server for VMWare 11 SP3	openssl	Released
SUSE Studio Onsite 1.3	openssl	Released

CVE-2016-8610

Common Vulnerabilities and Exposures

Upstream information

Description

SUSE information

List of released packages

Status of this issue by product and package

解决方案

Enterprise Linux

关键任务计算

云解决方案

软件定义的储存

SAP 解决方案

IT 基础设施管理

产品

热门话题

热门话题

热门话题

热门话题

热门话题

热门话题

支持产品

支持资源

服务

合作伙伴