Security update for openssl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1136-1 Final 1 1 2019-05-03T08:28:19Z current 2019-05-03T08:28:19Z 2019-05-03T08:28:19Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openssl This update for openssl fixes the following issues: - Reject invalid EC point coordinates (bsc#1131291) This helps openssl using services that do not do this verification on their own. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/nginx-ingress-controller:beta1-2019-1136,Container suse/sles12sp3:latest-2019-1136,SUSE-2019-1136,SUSE-OpenStack-Cloud-7-2019-1136,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-1136,SUSE-SLE-DESKTOP-12-SP3-2019-1136,SUSE-SLE-SAP-12-SP2-2019-1136,SUSE-SLE-SDK-12-SP3-2019-1136,SUSE-SLE-SERVER-12-SP2-2019-1136,SUSE-SLE-SERVER-12-SP2-BCL-2019-1136,SUSE-SLE-SERVER-12-SP3-2019-1136,SUSE-Storage-4-2019-1136 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191136-1/ Link for SUSE-SU-2019:1136-1 https://lists.suse.com/pipermail/sle-security-updates/2019-May/005421.html E-Mail link for SUSE-SU-2019:1136-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1131291 SUSE Bug 1131291 Container caasp/v4/nginx-ingress-controller:beta1 Container suse/sles12sp3:latest SUSE Enterprise Storage 4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE OpenStack Cloud 7 libopenssl1_0_0-1.0.2j-60.52.1 openssl-1.0.2j-60.52.1 libopenssl-devel-1.0.2j-60.52.1 libopenssl-devel-32bit-1.0.2j-60.52.1 libopenssl-devel-64bit-1.0.2j-60.52.1 libopenssl1_0_0-32bit-1.0.2j-60.52.1 libopenssl1_0_0-64bit-1.0.2j-60.52.1 libopenssl1_0_0-hmac-1.0.2j-60.52.1 libopenssl1_0_0-hmac-32bit-1.0.2j-60.52.1 libopenssl1_0_0-hmac-64bit-1.0.2j-60.52.1 openssl-cavs-1.0.2j-60.52.1 openssl-doc-1.0.2j-60.52.1 libopenssl1_0_0-1.0.2j-60.52.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 openssl-1.0.2j-60.52.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libopenssl1_0_0-1.0.2j-60.52.1 as a component of Container suse/sles12sp3:latest openssl-1.0.2j-60.52.1 as a component of Container suse/sles12sp3:latest libopenssl-devel-1.0.2j-60.52.1 as a component of SUSE Enterprise Storage 4 libopenssl1_0_0-1.0.2j-60.52.1 as a component of SUSE Enterprise Storage 4 libopenssl1_0_0-32bit-1.0.2j-60.52.1 as a component of SUSE Enterprise Storage 4 libopenssl1_0_0-hmac-1.0.2j-60.52.1 as a component of SUSE Enterprise Storage 4 libopenssl1_0_0-hmac-32bit-1.0.2j-60.52.1 as a component of SUSE Enterprise Storage 4 openssl-1.0.2j-60.52.1 as a component of SUSE Enterprise Storage 4 openssl-doc-1.0.2j-60.52.1 as a component of SUSE Enterprise Storage 4 libopenssl-devel-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libopenssl1_0_0-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libopenssl1_0_0-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 openssl-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libopenssl-devel-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libopenssl1_0_0-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libopenssl1_0_0-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libopenssl1_0_0-hmac-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libopenssl1_0_0-hmac-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssl-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssl-doc-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libopenssl-devel-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libopenssl1_0_0-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libopenssl1_0_0-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libopenssl1_0_0-hmac-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libopenssl1_0_0-hmac-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openssl-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openssl-doc-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libopenssl-devel-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP3 libopenssl1_0_0-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP3 libopenssl1_0_0-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP3 libopenssl1_0_0-hmac-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP3 libopenssl1_0_0-hmac-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP3 openssl-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP3 openssl-doc-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server 12 SP3 libopenssl-devel-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libopenssl1_0_0-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libopenssl1_0_0-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libopenssl1_0_0-hmac-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libopenssl1_0_0-hmac-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssl-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssl-doc-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libopenssl-devel-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libopenssl1_0_0-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libopenssl1_0_0-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libopenssl1_0_0-hmac-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libopenssl1_0_0-hmac-32bit-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssl-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssl-doc-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libopenssl-devel-1.0.2j-60.52.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libopenssl-devel-1.0.2j-60.52.1 as a component of SUSE OpenStack Cloud 7 libopenssl1_0_0-1.0.2j-60.52.1 as a component of SUSE OpenStack Cloud 7 libopenssl1_0_0-32bit-1.0.2j-60.52.1 as a component of SUSE OpenStack Cloud 7 libopenssl1_0_0-hmac-1.0.2j-60.52.1 as a component of SUSE OpenStack Cloud 7 libopenssl1_0_0-hmac-32bit-1.0.2j-60.52.1 as a component of SUSE OpenStack Cloud 7 openssl-1.0.2j-60.52.1 as a component of SUSE OpenStack Cloud 7 openssl-doc-1.0.2j-60.52.1 as a component of SUSE OpenStack Cloud 7