SUSE-RU-2022:0861-1 | Mondoo Vulnerability Intelligence

SUSE-RU-2022:0861-1

UNKNOWN

Security update for openssl-1_1

Published Mar 16, 2022

Modified 3 years ago

Fix available

Details

This update for openssl-1_1 fixes the following issues:

openssl-1_1:

CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
Fix PAC pointer authentication in ARM (bsc#1195856)
Pull libopenssl-1_1 when updating openssl-1_1 with the same version (bsc#1195792)
FIPS: Fix function and reason error codes (bsc#1182959)
Enable zlib compression support (bsc#1195149)

glibc:

Resolve installation issue of glibc-devel in SUSE Linux Enterprise Micro 5.1

linux-glibc-devel:

Resolve installation issue of linux-kernel-headers in SUSE Linux Enterprise Micro 5.1

libxcrypt:

Resolve installation issue of libxcrypt-devel in SUSE Linux Enterprise Micro 5.1

zlib:

Resolve installation issue of zlib-devel in SUSE Linux Enterprise Micro 5.1

Affected Packages(36 packages)

libminizip1

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

Fixed in:

1.2.11-3.26.10

libz1

Fixed in:

1.2.11-3.26.10

libz1-32bit

Fixed in:

1.2.11-3.26.10

minizip-devel

Fixed in:

1.2.11-3.26.10

zlib

Fixed in:

1.2.11-3.26.10

zlib-devel

Fixed in:

1.2.11-3.26.10

zlib-devel-32bit

Fixed in:

1.2.11-3.26.10

zlib-devel-static

Fixed in:

1.2.11-3.26.10

libopenssl-1_1-devel

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Module for Basesystem 15 SP3

Fixed in:

1.1.1d-11.43.1

libopenssl1_1

Fixed in:

1.1.1d-11.43.1

References

REPORT

https://bugzilla.suse.com/1182959

REPORT

https://bugzilla.suse.com/1195149

REPORT

https://bugzilla.suse.com/1195792