Oval Definition:	oval:org.opensuse.security:def:56220
Revision Date: 2020-12-01 Version: 1 Title: Security update for openssl (Moderate) Description: This update for openssl fixes the following issues: Security issues fixed: - CVE-2017-3735: openssl1,openssl: Malformed X.509 IPAdressFamily could cause OOB read (bsc#1056058) - CVE-2017-3736: openssl: bn_sqrx8x_internal carry bug on x86_64 (bsc#1066242) - Out of bounds read+crash in DES_fcrypt (bsc#1065363) - openssl DEFAULT_SUSE cipher list is missing ECDHE-ECDSA ciphers (bsc#1055825) Family: unix Class: patch Status: Reference(s): 1020427 1020868 1020890 1020976 1021741 1022428 1025109 1025311 1028184 1028656 1030624 1032075 1034866 1034908 1034911 1035204 1035406 1035950 1036211 1037242 1037334 1037336 1039495 1042159 1042800 1042801 1043073 1043296 1045035 1046636 1047674 1048902 1049381 1054724 1055825 1056058 1056334 1057378 1057585 1062069 1063122 1065363 1066242 1097356 1118319 1171252 1171254 877642 901488 907514 910258 918984 923967 932267 934524 934525 934526 934527 934528 934529 944463 944697 945167 947165 949138 949549 950367 950703 950705 950706 965901 994418 994605 996821 CVE-2011-2895 CVE-2012-3449 CVE-2012-4510 CVE-2013-1983 CVE-2013-1990 CVE-2013-1999 CVE-2013-6462 CVE-2014-0209 CVE-2014-0210 CVE-2014-0211 CVE-2014-0222 CVE-2014-1829 CVE-2014-1830 CVE-2014-9732 CVE-2015-1802 CVE-2015-1803 CVE-2015-1804 CVE-2015-2296 CVE-2015-4037 CVE-2015-4047 CVE-2015-4467 CVE-2015-4468 CVE-2015-4469 CVE-2015-4470 CVE-2015-4471 CVE-2015-4472 CVE-2015-5239 CVE-2015-6815 CVE-2015-7311 CVE-2015-7835 CVE-2015-7969 CVE-2015-7971 CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0971 CVE-2016-0972 CVE-2016-0973 CVE-2016-0974 CVE-2016-0975 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 CVE-2016-0981 CVE-2016-0982 CVE-2016-0983 CVE-2016-0984 CVE-2016-0985 CVE-2016-6834 CVE-2016-6835 CVE-2016-9602 CVE-2016-9603 CVE-2017-10664 CVE-2017-10806 CVE-2017-10911 CVE-2017-11334 CVE-2017-11434 CVE-2017-12809 CVE-2017-13672 CVE-2017-14167 CVE-2017-15038 CVE-2017-15289 CVE-2017-3302 CVE-2017-3313 CVE-2017-3735 CVE-2017-3736 CVE-2017-5436 CVE-2017-5579 CVE-2017-5973 CVE-2017-5987 CVE-2017-6505 CVE-2017-7377 CVE-2017-7471 CVE-2017-7493 CVE-2017-7718 CVE-2017-7980 CVE-2017-8086 CVE-2017-8112 CVE-2017-8309 CVE-2017-8379 CVE-2017-8380 CVE-2017-9330 CVE-2017-9373 CVE-2017-9374 CVE-2017-9375 CVE-2017-9503 CVE-2018-5848 CVE-2018-9568 CVE-2020-12653 CVE-2020-12654 SUSE-SU-2015:1894-1 SUSE-SU-2016:0011-1 SUSE-SU-2016:0400-1 SUSE-SU-2017:1149-1 SUSE-SU-2017:1315-1 SUSE-SU-2017:2946-1 SUSE-SU-2017:3169-1 SUSE-SU-2018:4153-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.0 NonFree openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information cracklib-2.9.6-lp150.2 is installed OR libcrack2-2.9.6-lp150.2 is installed OR libcrack2-32bit-2.9.6-lp150.2 is installed Definition Synopsis openSUSE Leap 15.0 NonFree is installed AND opera-63.0.3368.66-lp151.2.6 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information MozillaThunderbird-60.8.0-lp151.2.10 is installed OR MozillaThunderbird-buildsymbols-60.8.0-lp151.2.10 is installed OR MozillaThunderbird-translations-common-60.8.0-lp151.2.10 is installed OR MozillaThunderbird-translations-other-60.8.0-lp151.2.10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information flash-player-11.2.202.569-0.35 is installed OR flash-player-gnome-11.2.202.569-0.35 is installed OR flash-player-kde4-11.2.202.569-0.35 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libopenssl-devel-1.0.2j-60.16 is installed OR libopenssl1_0_0-1.0.2j-60.16 is installed OR libopenssl1_0_0-32bit-1.0.2j-60.16 is installed OR openssl-1.0.2j-60.16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cups-pk-helper-0.2.5-3 is installed OR cups-pk-helper-lang-0.2.5-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information qemu-2.3.1-33.3 is installed OR qemu-block-curl-2.3.1-33.3 is installed OR qemu-block-rbd-2.3.1-33.3 is installed OR qemu-guest-agent-2.3.1-33.3 is installed OR qemu-ipxe-1.0.0-33.3 is installed OR qemu-kvm-2.3.1-33.3 is installed OR qemu-lang-2.3.1-33.3 is installed OR qemu-ppc-2.3.1-33.3 is installed OR qemu-s390-2.3.1-33.3 is installed OR qemu-seabios-1.8.1-33.3 is installed OR qemu-sgabios-8-33.3 is installed OR qemu-tools-2.3.1-33.3 is installed OR qemu-vgabios-1.8.1-33.3 is installed OR qemu-x86-2.3.1-33.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND ipsec-tools-0.8.0-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information apache2-2.4.23-29.18 is installed OR apache2-doc-2.4.23-29.18 is installed OR apache2-example-pages-2.4.23-29.18 is installed OR apache2-prefork-2.4.23-29.18 is installed OR apache2-utils-2.4.23-29.18 is installed OR apache2-worker-2.4.23-29.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kgraft-patch-4_4_121-92_98-default-2-2 is installed OR kgraft-patch-SLE12-SP2_Update_26-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_74-92_35-default-10-2 is installed OR kgraft-patch-SLE12-SP2_Update_12-10-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information libproxy1-0.4.13-16 is installed OR libproxy1-32bit-0.4.13-16 is installed OR libproxy1-config-gnome3-0.4.13-16 is installed OR libproxy1-config-gnome3-32bit-0.4.13-16 is installed OR libproxy1-networkmanager-0.4.13-16 is installed OR libproxy1-pacrunner-webkit-0.4.13-16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libopenssl-devel-1.0.2j-60.46 is installed OR libopenssl1_0_0-1.0.2j-60.46 is installed OR libopenssl1_0_0-32bit-1.0.2j-60.46 is installed OR libopenssl1_0_0-hmac-1.0.2j-60.46 is installed OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.46 is installed OR openssl-1.0.2j-60.46 is installed OR openssl-doc-1.0.2j-60.46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND libwavpack1-4.60.99-5.3 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND python-requests-2.8.1-6.9 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND python-PyJWT-1.4.2-3.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information tomcat-8.0.53-29.27 is installed OR tomcat-admin-webapps-8.0.53-29.27 is installed OR tomcat-docs-webapp-8.0.53-29.27 is installed OR tomcat-el-3_0-api-8.0.53-29.27 is installed OR tomcat-javadoc-8.0.53-29.27 is installed OR tomcat-jsp-2_3-api-8.0.53-29.27 is installed OR tomcat-lib-8.0.53-29.27 is installed OR tomcat-servlet-3_1-api-8.0.53-29.27 is installed OR tomcat-webapps-8.0.53-29.27 is installed
BACK