Detections
Analytics

openSUSE Security Update : openssl (openSUSE-2019-1373)

medium Nessus Plugin ID 124850

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for openssl fixes the following issues :

 - Reject invalid EC point coordinates (bsc#1131291)

 This helps openssl using services that do not do this verification on their own.

This update was imported from the SUSE:SLE-12-SP2:Update update project.

Solution

Update the affected openssl packages.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=1131291

Plugin Details

Severity: Medium

ID: 124850

File Name: openSUSE-2019-1373.nasl

Version: 1.3

Type: Local

Agent: unix

Published: 5/13/2019

Updated: 1/19/2021

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Vulnerability Information

CPE: cpe:/o:novell:opensuse:42.3, p-cpe:/a:novell:opensuse:libopenssl-devel-32bit, p-cpe:/a:novell:opensuse:libopenssl-devel, p-cpe:/a:novell:opensuse:libopenssl1_0_0-32bit, p-cpe:/a:novell:opensuse:libopenssl1_0_0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libopenssl1_0_0-debuginfo, p-cpe:/a:novell:opensuse:libopenssl1_0_0-hmac-32bit, p-cpe:/a:novell:opensuse:libopenssl1_0_0-hmac, p-cpe:/a:novell:opensuse:libopenssl1_0_0, p-cpe:/a:novell:opensuse:openssl-cavs-debuginfo, p-cpe:/a:novell:opensuse:openssl-cavs, p-cpe:/a:novell:opensuse:openssl-debuginfo, p-cpe:/a:novell:opensuse:openssl-debugsource, p-cpe:/a:novell:opensuse:openssl

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 5/10/2019

Vulnerability Publication Date: 5/10/2019