This update for openssl fixes the following issues :

Security issues fixed :

The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951)

CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).

Other issues addressed: Fixed IV handling in SHAEXT paths:
aes/asm/aesni-sha*-x86_64.pl (bsc#1113975).

Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2019:0803-1)

medium Nessus Plugin ID 123547

Version 1.6

Version 1.5

Version 1.6 Jun 6, 2024, 7:33 AM CVSSv2 score source (set to "CVE-2019-1559") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202406060733
Version 1.5 Dec 6, 2022, 2:54 AM Reference Plugin Feed: 202212060254