< back to search

shield Security update for compat-openssl097g
slesappsp4-compat-openssl097g-13753

This update for compat-openssl097g fixes the following issues: These security issues were fixed: - CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack (bsc#1097158) - CVE-2018-0739: Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could have resulted in DoS (bsc#1087102) This non-security issue was fixed: - Fixed crash in DES_fcrypt (bsc#1065363)

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64
  • Packages
    compat-openssl097g
    Secure Sockets and Transport Layer Security
    0.9.7g-146.22.51.5.1 lock rpm lock src
    compat-openssl097g-32bit
    Secure Sockets and Transport Layer Security
    0.9.7g-146.22.51.5.1 lock rpm
SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64
  • Packages
    compat-openssl097g
    Secure Sockets and Transport Layer Security
    0.9.7g-146.22.51.5.1 lock rpm lock src
    compat-openssl097g-32bit
    Secure Sockets and Transport Layer Security
    0.9.7g-146.22.51.5.1 lock rpm