Security update for openssl-1_1 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1058-1 Final 1 1 2020-04-29T09:33:00Z current 2020-04-29T09:33:00Z 2020-04-29T09:33:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openssl-1_1 This update for openssl-1_1 fixes the following issues: - CVE-2020-1967: Fixed a denial of service via NULL pointer dereference in SSL_check_chain (bsc#1169407). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2020-1058,Image SLES12-SP5-Azure-Basic-On-Demand-2020-1058,Image SLES12-SP5-Azure-HPC-BYOS-2020-1058,Image SLES12-SP5-Azure-HPC-On-Demand-2020-1058,Image SLES12-SP5-Azure-SAP-BYOS-2020-1058,Image SLES12-SP5-Azure-SAP-On-Demand-2020-1058,Image SLES12-SP5-Azure-Standard-On-Demand-2020-1058,Image SLES12-SP5-EC2-BYOS-2020-1058,Image SLES12-SP5-EC2-ECS-On-Demand-2020-1058,Image SLES12-SP5-EC2-On-Demand-2020-1058,Image SLES12-SP5-EC2-SAP-BYOS-2020-1058,Image SLES12-SP5-EC2-SAP-On-Demand-2020-1058,Image SLES12-SP5-GCE-BYOS-2020-1058,Image SLES12-SP5-GCE-On-Demand-2020-1058,Image SLES12-SP5-GCE-SAP-BYOS-2020-1058,Image SLES12-SP5-GCE-SAP-On-Demand-2020-1058,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2020-1058,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2020-1058,SUSE-2020-1058,SUSE-SLE-SDK-12-SP4-2020-1058,SUSE-SLE-SDK-12-SP5-2020-1058,SUSE-SLE-SERVER-12-SP4-2020-1058,SUSE-SLE-SERVER-12-SP5-2020-1058 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201058-1/ Link for SUSE-SU-2020:1058-1 https://lists.suse.com/pipermail/sle-security-updates/2020-April/006722.html E-Mail link for SUSE-SU-2020:1058-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1169407 SUSE Bug 1169407 https://www.suse.com/security/cve/CVE-2020-1967/ SUSE CVE CVE-2020-1967 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 libopenssl1_1-1.1.1d-2.23.1 libopenssl-1_1-devel-1.1.1d-2.23.1 libopenssl-1_1-devel-32bit-1.1.1d-2.23.1 libopenssl-1_1-devel-64bit-1.1.1d-2.23.1 libopenssl1_1-32bit-1.1.1d-2.23.1 libopenssl1_1-64bit-1.1.1d-2.23.1 openssl-1_1-1.1.1d-2.23.1 openssl-1_1-doc-1.1.1d-2.23.1 libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-Azure-BYOS libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-EC2-BYOS libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-EC2-On-Demand libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-GCE-BYOS libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-GCE-On-Demand libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libopenssl1_1-1.1.1d-2.23.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libopenssl1_1-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server 12 SP4 libopenssl1_1-32bit-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server 12 SP4 openssl-1_1-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server 12 SP4 libopenssl1_1-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server 12 SP5 libopenssl1_1-32bit-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server 12 SP5 openssl-1_1-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server 12 SP5 libopenssl1_1-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libopenssl1_1-32bit-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssl-1_1-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libopenssl1_1-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libopenssl1_1-32bit-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 openssl-1_1-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libopenssl-1_1-devel-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libopenssl-1_1-devel-32bit-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libopenssl-1_1-devel-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libopenssl-1_1-devel-32bit-1.1.1d-2.23.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f). CVE-2020-1967 Image SLES12-SP5-Azure-BYOS:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-Azure-Basic-On-Demand:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-Azure-HPC-BYOS:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-Azure-HPC-On-Demand:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-Azure-SAP-BYOS:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-Azure-SAP-On-Demand:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-Azure-Standard-On-Demand:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-EC2-BYOS:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-EC2-ECS-On-Demand:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-EC2-On-Demand:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-EC2-SAP-BYOS:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-EC2-SAP-On-Demand:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-GCE-BYOS:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-GCE-On-Demand:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-GCE-SAP-BYOS:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-GCE-SAP-On-Demand:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libopenssl1_1-1.1.1d-2.23.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libopenssl1_1-1.1.1d-2.23.1 SUSE Linux Enterprise Server 12 SP4:libopenssl1_1-1.1.1d-2.23.1 SUSE Linux Enterprise Server 12 SP4:libopenssl1_1-32bit-1.1.1d-2.23.1 SUSE Linux Enterprise Server 12 SP4:openssl-1_1-1.1.1d-2.23.1 SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.23.1 SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.23.1 SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_1-1.1.1d-2.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_1-32bit-1.1.1d-2.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_1-1.1.1d-2.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenssl1_1-1.1.1d-2.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenssl1_1-32bit-1.1.1d-2.23.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:openssl-1_1-1.1.1d-2.23.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_1-devel-1.1.1d-2.23.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_1-devel-32bit-1.1.1d-2.23.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libopenssl-1_1-devel-1.1.1d-2.23.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.23.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201058-1/ https://www.suse.com/security/cve/CVE-2020-1967.html CVE-2020-1967 https://bugzilla.suse.com/1169407 SUSE Bug 1169407