logo
DATABASE RESOURCES PRICING ABOUT US

Security update for openssl-1_0_0 (important)

Description

An update that solves one vulnerability and has 6 fixes is now available. Description: This update for openssl-1_0_0 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491). - Initialized dh->nid to NID_undef in DH_new_method() (bsc#1177673). - Fixed a test failure in apache_ssl in fips mode (bsc#1177793). - Renamed BN_get_rfc3526_prime_* functions back to get_rfc3526_prime_* (bsc#1177575). - Restored private key check in EC_KEY_check_key (bsc#1177479). - Added shared secret KAT to FIPS DH selftest (bsc#1176029). - Included ECDH/DH Requirements from SP800-56Arev3 (bsc#1176029). - Used SHA-2 in the RSA pairwise consistency check (bsc#1155346) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-2269=1


Affected Package


OS OS Version Package Name Package Version
openSUSE Leap 15.1 - openSUSE Leap 15.1 (i586 x86_64):
openSUSE Leap 15.1 - openSUSE Leap 15.1 (i586 x86_64):
openSUSE Leap 15.1 - openSUSE Leap 15.1 (noarch):
openSUSE Leap 15.1 - openSUSE Leap 15.1 (x86_64):

Related