Security update for openssl-1_1 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2068-1 Final 1 1 2022-06-14T08:14:57Z current 2022-06-14T08:14:57Z 2022-06-14T08:14:57Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openssl-1_1 This update for openssl-1_1 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/helm-tiller:2.16.12-2022-2068,Container suse/sle15:15.1-2022-2068,Image SLES15-SP1-CHOST-BYOS-Azure-2022-2068,Image SLES15-SP1-CHOST-BYOS-EC2-2022-2068,Image SLES15-SP1-CHOST-BYOS-GCE-2022-2068,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2022-2068,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2022-2068,Image SLES15-SP1-SAPCAL-Azure-2022-2068,Image SLES15-SP1-SAPCAL-EC2-HVM-2022-2068,Image SLES15-SP1-SAPCAL-GCE-2022-2068,SUSE-2022-2068,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-2068,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-2068,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2068,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2068,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2068,SUSE-Storage-6-2022-2068 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222068-1/ Link for SUSE-SU-2022:2068-1 https://lists.suse.com/pipermail/sle-security-updates/2022-June/011281.html E-Mail link for SUSE-SU-2022:2068-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1185637 SUSE Bug 1185637 https://bugzilla.suse.com/1199166 SUSE Bug 1199166 https://www.suse.com/security/cve/CVE-2022-1292/ SUSE CVE CVE-2022-1292 page Container caasp/v4/helm-tiller:2.16.12 Container suse/sle15:15.1 Image SLES15-SP1-CHOST-BYOS-Azure Image SLES15-SP1-CHOST-BYOS-EC2 Image SLES15-SP1-CHOST-BYOS-GCE Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopenssl1_1-1.1.0i-150100.14.30.1 openssl-1_1-1.1.0i-150100.14.30.1 libopenssl1_1-32bit-1.1.0i-150100.14.30.1 libopenssl-1_1-devel-1.1.0i-150100.14.30.1 libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 libopenssl-1_1-devel-64bit-1.1.0i-150100.14.30.1 libopenssl1_1-64bit-1.1.0i-150100.14.30.1 libopenssl1_1-hmac-1.1.0i-150100.14.30.1 libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 libopenssl1_1-hmac-64bit-1.1.0i-150100.14.30.1 openssl-1_1-doc-1.1.0i-150100.14.30.1 libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Container caasp/v4/helm-tiller:2.16.12 openssl-1_1-1.1.0i-150100.14.30.1 as a component of Container caasp/v4/helm-tiller:2.16.12 libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Container suse/sle15:15.1 openssl-1_1-1.1.0i-150100.14.30.1 as a component of Container suse/sle15:15.1 libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-CHOST-BYOS-Azure openssl-1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-CHOST-BYOS-Azure libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-CHOST-BYOS-EC2 openssl-1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-CHOST-BYOS-EC2 libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-CHOST-BYOS-GCE openssl-1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-CHOST-BYOS-GCE libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production openssl-1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production openssl-1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAPCAL-Azure libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAPCAL-Azure openssl-1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAPCAL-Azure libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM openssl-1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM libopenssl1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAPCAL-GCE libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAPCAL-GCE openssl-1_1-1.1.0i-150100.14.30.1 as a component of Image SLES15-SP1-SAPCAL-GCE libopenssl-1_1-devel-1.1.0i-150100.14.30.1 as a component of SUSE Enterprise Storage 6 libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Enterprise Storage 6 libopenssl1_1-1.1.0i-150100.14.30.1 as a component of SUSE Enterprise Storage 6 libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Enterprise Storage 6 libopenssl1_1-hmac-1.1.0i-150100.14.30.1 as a component of SUSE Enterprise Storage 6 libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Enterprise Storage 6 openssl-1_1-1.1.0i-150100.14.30.1 as a component of SUSE Enterprise Storage 6 libopenssl-1_1-devel-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopenssl1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopenssl1_1-hmac-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openssl-1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopenssl-1_1-devel-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopenssl1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopenssl1_1-hmac-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openssl-1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopenssl-1_1-devel-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libopenssl1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libopenssl1_1-hmac-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL openssl-1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libopenssl-1_1-devel-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopenssl1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopenssl1_1-hmac-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openssl-1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopenssl-1_1-devel-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopenssl1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopenssl1_1-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopenssl1_1-hmac-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openssl-1_1-1.1.0i-150100.14.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd). CVE-2022-1292 Container caasp/v4/helm-tiller:2.16.12:libopenssl1_1-1.1.0i-150100.14.30.1 Container caasp/v4/helm-tiller:2.16.12:openssl-1_1-1.1.0i-150100.14.30.1 Container suse/sle15:15.1:libopenssl1_1-1.1.0i-150100.14.30.1 Container suse/sle15:15.1:openssl-1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-CHOST-BYOS-Azure:libopenssl1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-CHOST-BYOS-Azure:openssl-1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-CHOST-BYOS-EC2:libopenssl1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-CHOST-BYOS-EC2:openssl-1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-CHOST-BYOS-GCE:libopenssl1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-CHOST-BYOS-GCE:openssl-1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libopenssl1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:openssl-1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libopenssl1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:openssl-1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAPCAL-Azure:libopenssl1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAPCAL-Azure:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAPCAL-Azure:openssl-1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libopenssl1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAPCAL-EC2-HVM:openssl-1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAPCAL-GCE:libopenssl1_1-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAPCAL-GCE:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 Image SLES15-SP1-SAPCAL-GCE:openssl-1_1-1.1.0i-150100.14.30.1 SUSE Enterprise Storage 6:libopenssl-1_1-devel-1.1.0i-150100.14.30.1 SUSE Enterprise Storage 6:libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 SUSE Enterprise Storage 6:libopenssl1_1-1.1.0i-150100.14.30.1 SUSE Enterprise Storage 6:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 SUSE Enterprise Storage 6:libopenssl1_1-hmac-1.1.0i-150100.14.30.1 SUSE Enterprise Storage 6:libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 SUSE Enterprise Storage 6:openssl-1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenssl-1_1-devel-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenssl1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenssl1_1-hmac-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openssl-1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenssl-1_1-devel-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenssl1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenssl1_1-hmac-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openssl-1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenssl-1_1-devel-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenssl1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenssl1_1-hmac-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-BCL:openssl-1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenssl-1_1-devel-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenssl1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenssl1_1-hmac-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openssl-1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenssl-1_1-devel-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenssl1_1-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenssl1_1-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenssl1_1-hmac-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openssl-1_1-1.1.0i-150100.14.30.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222068-1/ https://www.suse.com/security/cve/CVE-2022-1292.html CVE-2022-1292 https://bugzilla.suse.com/1199166 SUSE Bug 1199166 https://bugzilla.suse.com/1200550 SUSE Bug 1200550 https://bugzilla.suse.com/1200650 SUSE Bug 1200650 https://bugzilla.suse.com/1200758 SUSE Bug 1200758 https://bugzilla.suse.com/1202688 SUSE Bug 1202688