| Revision Date: | 2021-03-25 | Version: | 1 |
| Title: | Security update for openssl-1_1 (Important) |
| Description: |
This update for openssl-1_1 fixes the security issue:
CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension but includes a signature_algorithms_cert extension, then a NULL pointer dereference will result, leading to a crash and a denial of service attack. OpenSSL TLS clients are not impacted by this issue. [bsc#1183852]
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1163102
1163103
1163104
1166916
1171186
1172442
1172443
1173157
1174139
1174157
1174230
1174955
1175465
1176384
1176430
1176756
1176899
1177155
1177977
1183852
CVE-2014-0240
CVE-2015-5174
CVE-2015-5345
CVE-2015-5346
CVE-2015-5351
CVE-2016-0706
CVE-2016-0714
CVE-2016-0763
CVE-2016-3092
CVE-2016-8745
CVE-2017-12617
CVE-2017-5647
CVE-2017-5648
CVE-2017-5664
CVE-2018-11784
CVE-2018-1336
CVE-2018-8014
CVE-2018-8034
CVE-2018-8037
CVE-2019-15604
CVE-2019-15605
CVE-2019-15606
CVE-2020-11080
CVE-2020-12387
CVE-2020-12392
CVE-2020-12393
CVE-2020-12395
CVE-2020-12397
CVE-2020-14556
CVE-2020-14562
CVE-2020-14573
CVE-2020-14577
CVE-2020-14581
CVE-2020-14583
CVE-2020-14593
CVE-2020-14621
CVE-2020-15673
CVE-2020-15676
CVE-2020-15677
CVE-2020-15678
CVE-2020-15683
CVE-2020-15708
CVE-2020-15969
CVE-2020-25637
CVE-2020-6831
CVE-2020-7598
CVE-2020-8174
CVE-2021-3449
openSUSE-SU-2020:0293-1
openSUSE-SU-2020:0643-1
openSUSE-SU-2020:0802-1
openSUSE-SU-2020:1191-1
openSUSE-SU-2020:1777-1
openSUSE-SU-2020:1780-1
SUSE-SU-2021:0955-1
|
| Platform(s): | openSUSE Leap 15.1
openSUSE Leap 15.2
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Public Cloud 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15 SP1
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.1 is installed AND Package Information
nodejs8-8.17.0-lp151.2.12 is installed
OR nodejs8-devel-8.17.0-lp151.2.12 is installed
OR nodejs8-docs-8.17.0-lp151.2.12 is installed
OR npm8-8.17.0-lp151.2.12 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.2 is installed
AND Package Information
java-11-openjdk-11.0.8.0-lp152.2.3 is installed
OR java-11-openjdk-accessibility-11.0.8.0-lp152.2.3 is installed
OR java-11-openjdk-demo-11.0.8.0-lp152.2.3 is installed
OR java-11-openjdk-devel-11.0.8.0-lp152.2.3 is installed
OR java-11-openjdk-headless-11.0.8.0-lp152.2.3 is installed
OR java-11-openjdk-javadoc-11.0.8.0-lp152.2.3 is installed
OR java-11-openjdk-jmods-11.0.8.0-lp152.2.3 is installed
OR java-11-openjdk-src-11.0.8.0-lp152.2.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
AND Package Information
libopenssl-1_1-devel-1.1.1d-11.20.1 is installed
OR libopenssl1_1-1.1.1d-11.20.1 is installed
OR libopenssl1_1-32bit-1.1.1d-11.20.1 is installed
OR libopenssl1_1-hmac-1.1.1d-11.20.1 is installed
OR libopenssl1_1-hmac-32bit-1.1.1d-11.20.1 is installed
OR openssl-1_1-1.1.1d-11.20.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
AND apache2-mod_wsgi-4.5.18-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed
AND Package Information
tomcat-9.0.14-2 is installed
OR tomcat-admin-webapps-9.0.14-2 is installed
OR tomcat-el-3_0-api-9.0.14-2 is installed
OR tomcat-jsp-2_3-api-9.0.14-2 is installed
OR tomcat-lib-9.0.14-2 is installed
OR tomcat-servlet-4_0-api-9.0.14-2 is installed
OR tomcat-webapps-9.0.14-2 is installed
|