Oval Definition:	oval:org.opensuse.security:def:73798
Revision Date: 2021-03-25 Version: 1 Title: Security update for openssl-1_1 (Important) Description: This update for openssl-1_1 fixes the security issue: CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension but includes a signature_algorithms_cert extension, then a NULL pointer dereference will result, leading to a crash and a denial of service attack. OpenSSL TLS clients are not impacted by this issue. [bsc#1183852] Family: unix Class: patch Status: Reference(s): 1174538 1174662 1183852 CVE-2020-15652 CVE-2020-15653 CVE-2020-15654 CVE-2020-15655 CVE-2020-15656 CVE-2020-15657 CVE-2020-15658 CVE-2020-15659 CVE-2020-6463 CVE-2020-6514 CVE-2020-9862 CVE-2020-9893 CVE-2020-9894 CVE-2020-9895 CVE-2020-9915 CVE-2020-9925 CVE-2021-3449 SUSE-SU-2020:2199-1 SUSE-SU-2021:0955-1 Platform(s): SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information MozillaFirefox-78.1.0-3.100 is installed OR MozillaFirefox-branding-upstream-78.1.0-3.100 is installed OR MozillaFirefox-buildsymbols-78.1.0-3.100 is installed OR MozillaFirefox-devel-78.1.0-3.100 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information typelib-1_0-JavaScriptCore-4_0-2.28.4-3.6 is installed OR typelib-1_0-WebKit2-4_0-2.28.4-3.6 is installed OR typelib-1_0-WebKit2WebExtension-4_0-2.28.4-3.6 is installed OR webkit2gtk3-2.28.4-3.6 is installed OR webkit2gtk3-devel-2.28.4-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information libopenssl-1_1-devel-1.1.1d-11.20.1 is installed OR libopenssl1_1-1.1.1d-11.20.1 is installed OR libopenssl1_1-32bit-1.1.1d-11.20.1 is installed OR libopenssl1_1-hmac-1.1.1d-11.20.1 is installed OR libopenssl1_1-hmac-32bit-1.1.1d-11.20.1 is installed OR openssl-1_1-1.1.1d-11.20.1 is installed
BACK