SUSE-SU-2021:2852-1

MEDIUM5.3

Security update for compat-openssl098

Published Aug 27, 2021

Modified 4 years ago

Fix available

Details

Description of the patch:

This update for compat-openssl098 fixes the following security issue:

CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attack. [bsc#1189521]

Affected Packages

libopenssl0_9_8

SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server for SAP Applications 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

0.9.8j-106.27.2

libopenssl0_9_8-32bit

SUSE Linux Enterprise Module for Legacy 12

Fixed in:

0.9.8j-106.27.2

References

ADVISORY

https://bugzilla.suse.com/1189521

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2021-August/009363.html

ADVISORY