shield
Security update for openssl
SUSE-SLE-SDK-12-SP3-2019-803
This update for openssl fixes the following issues: Security issues fixed: - The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951) - CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080). Other issues addressed: - Fixed IV handling in SHAEXT paths: aes/asm/aesni-sha*-x86_64.pl (bsc#1113975). - Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078).
-
Release DateMar 29 2019
-
References
-
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Software Development Kit 12.3 aarch64
-
Packageslibopenssl-devel
Include Files and Libraries mandatory for Developmentopenssl1.0.2j-60.49.1lock rpm
Secure Sockets and Transport Layer Security1.0.2j-60.49.1lock src
SUSE Linux Enterprise Software Development Kit 12.3 ppc64le
-
Packageslibopenssl-devel
Include Files and Libraries mandatory for Developmentopenssl1.0.2j-60.49.1lock rpm
Secure Sockets and Transport Layer Security1.0.2j-60.49.1lock src
SUSE Linux Enterprise Software Development Kit 12.3 s390x
-
Packageslibopenssl-devel
Include Files and Libraries mandatory for Developmentopenssl1.0.2j-60.49.1lock rpm
Secure Sockets and Transport Layer Security1.0.2j-60.49.1lock src
SUSE Linux Enterprise Software Development Kit 12.3 x86_64
-
Packageslibopenssl-devel
Include Files and Libraries mandatory for Developmentopenssl1.0.2j-60.49.1lock rpm
Secure Sockets and Transport Layer Security1.0.2j-60.49.1lock src