Oval Definition:oval:org.opensuse.security:def:68454
Revision Date:2020-12-01Version:1
Title:Security update for openssl-1_1 (Moderate)
Description:

This update for openssl-1_1 fixes the following issues:

Security issue fixed:

- CVE-2019-1551: Fixed an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli (bsc#1158809).

Various FIPS related improvements were done:

- FIPS: Backport SSH KDF to openssl (jsc#SLE-8789, bsc#1157775). - Port FIPS patches from SLE-12 (bsc#1158101). - Use SHA-2 in the RSA pairwise consistency check (bsc#1155346).
Family:unixClass:patch
Status:Reference(s):1155346
1157775
1158101
1158809
1173466
1173467
1173469
CVE-2019-1551
CVE-2020-15304
CVE-2020-15305
CVE-2020-15306
SUSE-SU-2020:0069-1
SUSE-SU-2020:1931-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • libopenssl-1_1-devel-1.1.0i-14.6 is installed
  • OR libopenssl1_1-1.1.0i-14.6 is installed
  • OR libopenssl1_1-32bit-1.1.0i-14.6 is installed
  • OR libopenssl1_1-hmac-1.1.0i-14.6 is installed
  • OR libopenssl1_1-hmac-32bit-1.1.0i-14.6 is installed
  • OR openssl-1_1-1.1.0i-14.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND Package Information
  • libIlmImf-2_2-23-2.2.1-3.18 is installed
  • OR libIlmImfUtil-2_2-23-2.2.1-3.18 is installed
  • OR openexr-2.2.1-3.18 is installed
  • OR openexr-devel-2.2.1-3.18 is installed
  • BACK