SUSE-SU-2019:1608-1

MEDIUM4.0

Security update for compat-openssl098

Published Jun 21, 2019

Modified 7 years ago

Fix available

Details

Description of the patch:

This update for compat-openssl098 fixes the following issues:

CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)
Reject invalid EC point coordinates (bsc#1131291)
Fixed 'The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations' (bsc#1117951)

Affected Packages

libopenssl0_9_8

SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server 12

Fixed in:

0.9.8j-106.12.1

libopenssl0_9_8-32bit

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

0.9.8j-106.12.1

References

ADVISORY

https://bugzilla.suse.com/1117951

ADVISORY

https://bugzilla.suse.com/1127080

ADVISORY

https://bugzilla.suse.com/1131291

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-June/005602.html

ADVISORY