SUSE-SU-2019:2413-1

UNKNOWN

Security update for openssl

Published Sep 20, 2019

Modified 6 years ago

Fix available

Details

This update for openssl fixes the following issues:

OpenSSL Security Advisory [10 September 2019]

CVE-2019-1547: Added EC_GROUP_set_generator side channel attack avoidance (bsc#1150003).
CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key (bsc#1150250).

Affected Packages

libopenssl-devel

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.0.2j-60.55.1

libopenssl1_0_0

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.0.2j-60.55.1

libopenssl1_0_0-32bit

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.0.2j-60.55.1

libopenssl1_0_0-hmac

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.0.2j-60.55.1

libopenssl1_0_0-hmac-32bit

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.0.2j-60.55.1

openssl

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.0.2j-60.55.1

openssl-doc

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

1.0.2j-60.55.1

References

https://bugzilla.suse.com/1150003

https://bugzilla.suse.com/1150250

https://www.suse.com/security/cve/CVE-2019-1547

https://www.suse.com/security/cve/CVE-2019-1563

https://www.suse.com/support/update/announcement/2019/suse-su-20192413-1/

Upstream

CVE-2019-1547 CVE-2019-1563

Related

CVE-2019-1547 CVE-2019-1563

Ecosystems(12)

SUSE Enterprise Storage 4 SUSE Enterprise Storage 5 SUSE HPE Helion OpenStack 8 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS

Timeline

PublishedSep 20, 2019

ModifiedSep 20, 2019

SUSE-SU-2019:2413-1 | Mondoo Vulnerability Intelligence