SUSE-SU-2022:2197-1

MEDIUM6.7

Security update for openssl-1_0_0

Published Jun 28, 2022

Modified 4 years ago

Fix available

Details

Description of the patch:

This update for openssl-1_0_0 fixes the following issues:

CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)

Affected Packages

libopenssl0_9_8

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

0.9.8j-106.36.1

libopenssl0_9_8-32bit

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

0.9.8j-106.36.1

References

ADVISORY

https://bugzilla.suse.com/1199166

ADVISORY

https://bugzilla.suse.com/1200550

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-June/011370.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-1292/

ADVISORY