SUSE-SU-2021:2826-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attack. bsc1189521...

DSA-4963-1 openssl - security update

Bulletin has no description...

SUSE-SU-2021:14723-1 Security update for openvpn-openssl1

This update for openvpn-openssl1 fixes the following issues: - CVE-2020-15078: Fixed authentication bypass with deferred authentication bsc1185279. - CVE-2018-7544: Fixed cross-protocol scripting issue that was discovered in the management interface bsc1085803...

SUSE: Security Advisory (SUSE-SU-2018:3866-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:0441-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

OPENSUSE-SU-2021:0476-1 Security update for openssl-1_1

This update for openssl-11 fixes the security issue: CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension but includes a signaturealgorithmscert...

SUSE-SU-2021:0939-1 Security update for openssl

This update for openssl fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 - CVE-2021-23841: Fixed a Null pointer dereference in X509issuerandserialhash bsc1182331...

OPENSUSE-SU-2021:0430-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 - CVE-2021-23841: Fixed a Null pointer dereference in X509issuerandserialhash bsc1182331 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:0427-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 - CVE-2021-23841: Fixed a Null pointer dereference in X509issuerandserialhash bsc1182331 - Fixed unresolved error codes in FIPS bsc1182959. This update was imported from t...

DSA-4855-1 openssl - security update

Bulletin has no description...

MGASA-2020-0467 Updated openssl packages fix security vulnerability

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a GENERALNAME to see if they are equal or not. This function behaves incorrect...

OPENSUSE-SU-2020:2236-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME bsc1179491. - Initialized dh-nid to NIDundef in DHnewmethod bsc1177673. - Fixed a test failure in apachessl in fips mode bsc1177793. - Renamed BNgetrfc3526prime functions back...

SUSE-SU-2020:3763-1 Security update for openssl

This update for openssl fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME bsc1179491...

SUSE-SU-2020:3721-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME bsc1179491...

SUSE-SU-2020:3720-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME bsc1179491...

SUSE-SU-2020:14491-1 Security update for openssl

This update for openssl fixes the following issues: - CVE-2020-1968: Introduced hardening against the Raccoon attack by always generating fresh DH keys and never reuse them across multiple TLS connections bsc1176331...

SUSE-SU-2020:1058-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2020-1967: Fixed a denial of service via NULL pointer dereference in SSLcheckchain bsc1169407...

PT-2020-5188

Name of the Vulnerable Software and Affected Versions Wildfly versions 7.2.0.GA through 7.2.5.CR2 Description A flaw was found when an OpenSSL security provider is used with Wildfly, where the 'enabled-protocols' value in the Wildfly configuration isn't honored. This could allow an attacker to...

SUSE-SU-2020:0516-1 Security update for openssl

This update for openssl fixes the following issues: - Add missing commits fixing the security issue called 'The 9 Lives of Bleichenbacher's CAT'. bsc1117951 - Fix a memory leak problem in function 'BNcopy'. bsc1160163...