SUSE-SU-2022:2197-1

Details

This update for openssl-1_0_0 fixes the following issues:

CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)

Affected Packages

compat-openssl098

SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server for SAP Applications 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

0.9.8j-106.36.1

libopenssl0_9_8

SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server for SAP Applications 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

0.9.8j-106.36.1

libopenssl0_9_8-32bit

SUSE Linux Enterprise Module for Legacy 12

Fixed in:

0.9.8j-106.36.1

References

REPORT

https://bugzilla.suse.com/1199166

REPORT

https://bugzilla.suse.com/1200550

WEB

https://www.suse.com/security/cve/CVE-2022-1292

WEB

https://www.suse.com/security/cve/CVE-2022-2068

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20222197-1/