Oval Definition:	oval:org.opensuse.security:def:20157940
Revision Date: 2023-06-22 Version: 1 Title: CVE-2015-7940 Description: The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack." Family: unix Class: vulnerability Status: Reference(s): CVE-2015-7940 Mitre CVE-2015-7940 SUSE CVE-2015-7940 openSUSE-SU-2015:1911-1 openSUSE-SU-2015:1911-1 TID7022077 Platform(s): openSUSE 13.1 openSUSE 13.2 openSUSE Leap 42.1 openSUSE Tumbleweed SUSE Enterprise Storage 7 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Legacy 12 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE 13.1 is installed AND Package Information bouncycastle-1.53-8.3.1 is installed OR bouncycastle-javadoc-1.53-8.3.1 is installed Definition Synopsis openSUSE 13.2 is installed AND Package Information bouncycastle-1.53-13.3.1 is installed OR bouncycastle-javadoc-1.53-13.3.1 is installed Definition Synopsis openSUSE Leap 42.1 is installed AND Package Information bouncycastle-1.53-16.1 is installed AND bouncycastle is signed with openSUSE key OR bouncycastle-javadoc-1.53-16.1 is installed AND bouncycastle-javadoc is signed with openSUSE key Definition Synopsis SUSE OpenStack Cloud 7 is installed AND nodejs6 is affected Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND Package Information bouncycastle-1.64-1 is installed OR bouncycastle-pg-1.64-1 is installed Definition Synopsis openSUSE Tumbleweed is installed AND Package Information bouncycastle-1.54-1.2 is installed OR bouncycastle-javadoc-1.54-1.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND Package Information bouncycastle-1.64-1.63 is installed OR bouncycastle-pg-1.64-1.63 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed AND Package Information bouncycastle-1.64-1.63 is installed OR bouncycastle-pg-1.64-1.63 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND tomcat is not affected OR Package Information SUSE Linux Enterprise High Performance Computing 12 is installed OR SUSE Linux Enterprise Module for Legacy 12 is installed OR SUSE Linux Enterprise Server 12 is installed OR SUSE Linux Enterprise Server 12 SP3 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND compat-libgcrypt11 is not affected OR Package Information SUSE Linux Enterprise Server 12 SP1 is installed AND apache2 is not affected OR freetype2 is not affected OR libgcrypt is affected OR Package Information SUSE Linux Enterprise Server 12 is installed AND apache2 is not affected OR freetype2 is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND compat-openssl098 is affected OR pcre2 is affected OR tomcat is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND libopenssl0_9_8 is affected OR curl is affected OR libcurl4 is affected OR libcurl4-32bit is affected OR mozilla-nspr is affected OR mozilla-nspr-32bit is affected OR mozilla-nspr-devel is affected OR libpcre2-16-0 is affected OR libpcre2-32-0 is affected OR libpcre2-8-0 is affected OR libpcre2-posix2 is affected OR tomcat is affected OR tomcat-admin-webapps is affected OR tomcat-docs-webapp is affected OR tomcat-el-3_0-api is affected OR tomcat-javadoc is affected OR tomcat-jsp-2_3-api is affected OR tomcat-lib is affected OR tomcat-servlet-3_1-api is affected OR tomcat-webapps is affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND libopenssl0_9_8 is affected OR mozilla-nspr is affected OR mozilla-nspr-32bit is affected OR mozilla-nspr-devel is affected OR libpcre2-16-0 is affected OR libpcre2-32-0 is affected OR libpcre2-8-0 is affected OR libpcre2-posix2 is affected OR tomcat is not affected OR tomcat-admin-webapps is not affected OR tomcat-docs-webapp is not affected OR tomcat-el-3_0-api is not affected OR tomcat-javadoc is not affected OR tomcat-jsp-2_3-api is not affected OR tomcat-lib is not affected OR tomcat-servlet-4_0-api is not affected OR tomcat-webapps is not affected OR Package Information SUSE Linux Enterprise Server 12 SP5 is installed AND libpcre2-16-0 is affected OR libpcre2-32-0 is affected OR libpcre2-8-0 is affected OR libpcre2-posix2 is affected OR tomcat is not affected OR tomcat-admin-webapps is not affected OR tomcat-docs-webapp is not affected OR tomcat-el-3_0-api is not affected OR tomcat-javadoc is not affected OR tomcat-jsp-2_3-api is not affected OR tomcat-lib is not affected OR tomcat-servlet-4_0-api is not affected OR tomcat-webapps is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND Package Information bouncycastle-1.64-1.63 is installed OR bouncycastle-pg-1.64-1.63 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 is installed AND freetype2 is not affected OR Package Information SUSE Linux Enterprise Desktop 12 SP1 is installed AND freetype2 is not affected OR libgcrypt is affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Manager Proxy 4.3 is installed OR SUSE Manager Retail Branch Server 4.3 is installed OR SUSE Manager Server 4.3 is installed AND zlib-devel-32bit is not affected OR Package Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Manager Proxy 4.3 is installed OR SUSE Manager Retail Branch Server 4.3 is installed OR SUSE Manager Server 4.3 is installed AND libopenssl-devel is not affected OR openssl is not affected OR libminizip1 is not affected OR libz1 is not affected OR libz1-32bit is not affected OR minizip-devel is not affected OR zlib-devel is not affected OR zlib-devel-static is not affected OR Package Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND libopenssl-devel is not affected OR openssl is not affected OR Package Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.1 is installed OR SUSE Manager Server 4.2 is installed AND bouncycastle-1.64-1.63 is installed OR bouncycastle-pg-1.64-1.63 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP1 is installed AND tomcat6 is not affected OR Package Information SUSE Linux Enterprise Server 11 SP3 is installed AND curl is affected OR tomcat6 is not affected Definition Synopsis Release Information SUSE OpenStack Cloud Crowbar 8 is installed AND curl is affected OR libcurl4 is affected OR libcurl4-32bit is affected OR mozilla-nspr is affected OR mozilla-nspr-32bit is affected OR mozilla-nspr-devel is affected OR nodejs6 is affected OR libpcre1 is affected OR libpcre1-32bit is affected OR libpcre16-0 is affected OR libpcrecpp0 is affected OR libpcreposix0 is affected OR pcre-devel is affected OR libpcre2-16-0 is affected OR libpcre2-32-0 is affected OR libpcre2-8-0 is affected OR libpcre2-posix2 is affected OR python-PyKMIP is affected OR tomcat is affected OR tomcat-admin-webapps is affected OR tomcat-docs-webapp is affected OR tomcat-el-3_0-api is affected OR tomcat-javadoc is affected OR tomcat-jsp-2_3-api is affected OR tomcat-lib is affected OR tomcat-servlet-3_1-api is affected OR tomcat-webapps is affected OR libz1 is affected OR libz1-32bit is affected OR zlib-devel is affected OR Package Information SUSE OpenStack Cloud 8 is installed AND curl is affected OR libcurl4 is affected OR libcurl4-32bit is affected OR mozilla-nspr is affected OR mozilla-nspr-32bit is affected OR mozilla-nspr-devel is affected OR libpcre1 is affected OR libpcre1-32bit is affected OR libpcre16-0 is affected OR libpcrecpp0 is affected OR libpcreposix0 is affected OR pcre-devel is affected OR libpcre2-16-0 is affected OR libpcre2-32-0 is affected OR libpcre2-8-0 is affected OR libpcre2-posix2 is affected OR python-PyKMIP is affected OR tomcat is affected OR tomcat-admin-webapps is affected OR tomcat-docs-webapp is affected OR tomcat-el-3_0-api is affected OR tomcat-javadoc is affected OR tomcat-jsp-2_3-api is affected OR tomcat-lib is affected OR tomcat-servlet-3_1-api is affected OR tomcat-webapps is affected OR libz1 is affected OR libz1-32bit is affected OR zlib-devel is affected Definition Synopsis Release Information SUSE Manager Proxy 4.0 is installed OR SUSE Manager Retail Branch Server 4.0 is installed OR SUSE Manager Server 4.0 is installed AND Package Information MozillaFirefox is affected OR mariadb is affected Definition Synopsis Release Information SUSE Linux Enterprise Real Time 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND libopenssl-devel is not affected OR openssl is not affected OR Package Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND bouncycastle-1.64-1.63 is installed OR bouncycastle-pg-1.64-1.63 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND libopenssl-devel is not affected OR openssl is not affected OR Package Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND bouncycastle-1.64-1.63 is installed OR bouncycastle-pg-1.64-1.63 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND tomcat is not affected OR Package Information SUSE OpenStack Cloud Crowbar 9 is installed AND mozilla-nspr is affected OR mozilla-nspr-32bit is affected OR mozilla-nspr-devel is affected OR nodejs6 is affected OR libpcre1 is affected OR libpcre1-32bit is affected OR libpcre16-0 is affected OR libpcrecpp0 is affected OR libpcreposix0 is affected OR pcre-devel is affected OR libpcre2-16-0 is affected OR libpcre2-32-0 is affected OR libpcre2-8-0 is affected OR libpcre2-posix2 is affected OR tomcat is not affected OR tomcat-admin-webapps is not affected OR tomcat-docs-webapp is not affected OR tomcat-el-3_0-api is not affected OR tomcat-javadoc is not affected OR tomcat-jsp-2_3-api is not affected OR tomcat-lib is not affected OR tomcat-servlet-4_0-api is not affected OR tomcat-webapps is not affected OR Package Information SUSE OpenStack Cloud 9 is installed AND mozilla-nspr is affected OR mozilla-nspr-32bit is affected OR mozilla-nspr-devel is affected OR libpcre1 is affected OR libpcre1-32bit is affected OR libpcre16-0 is affected OR libpcrecpp0 is affected OR libpcreposix0 is affected OR pcre-devel is affected OR libpcre2-16-0 is affected OR libpcre2-32-0 is affected OR libpcre2-8-0 is affected OR libpcre2-posix2 is affected OR tomcat is not affected OR tomcat-admin-webapps is not affected OR tomcat-docs-webapp is not affected OR tomcat-el-3_0-api is not affected OR tomcat-javadoc is not affected OR tomcat-jsp-2_3-api is not affected OR tomcat-lib is not affected OR tomcat-servlet-4_0-api is not affected OR tomcat-webapps is not affected Definition Synopsis Release Information SUSE Enterprise Storage 7 is installed OR SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed OR SUSE Linux Enterprise Real Time 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND libopenssl-devel is not affected OR openssl is not affected OR Package Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.1 is installed OR SUSE Manager Server 4.2 is installed AND bouncycastle-1.64-1.63 is installed OR bouncycastle-pg-1.64-1.63 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Manager Proxy 4.3 is installed OR SUSE Manager Retail Branch Server 4.3 is installed OR SUSE Manager Server 4.3 is installed AND Package Information bouncycastle-1.64-3.3.1 is installed OR bouncycastle-pg-1.64-3.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND Package Information bouncycastle-1.64-1.63 is installed OR bouncycastle-pg-1.64-1.63 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Development Tools 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND Package Information bouncycastle-1.72-150200.3.12.1 is installed OR bouncycastle-pg-1.72-150200.3.12.1 is installed OR bouncycastle-pkix-1.72-150200.3.12.1 is installed OR bouncycastle-util-1.72-150200.3.12.1 is installed
BACK