Oval Definition:oval:org.opensuse.security:def:100651
Revision Date:2021-08-24Version:1
Title: (Important)
Description:

This update for openssl-1_1 fixes the following security issues:

- CVE-2021-3711: A bug in the implementation of the SM2 decryption code could lead to buffer overflows. [bsc#1189520]

- CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attack. [bsc#1189521]
Family:unixClass:patch
Status:Reference(s):1189520
1189521
CVE-2015-7236
CVE-2017-8779
CVE-2021-3711
CVE-2021-3712
Platform(s):Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND rpcbind-0.2.3-5.9.2 is installed
    • Definition Synopsis
  • Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE is installed
  • AND Package Information
  • libopenssl1_1-1.1.1d-11.27.1 is installed
  • OR openssl-1_1-1.1.1d-11.27.1 is installed
    • BACK