CVE-2020-1971

Upstream information

CVE-2020-1971 at MITRE

Description

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the "-crl_download" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).

---

SUSE information

Overall state of this security issue: Running

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	4.3
Vector	AV:N/AC:M/Au:N/C:N/I:N/A:P
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

CVSS v3 Scores

	National Vulnerability Database	SUSE
Base Score	5.9	7.5
Vector	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Access Vector	Network	Network
Access Complexity	High	Low
Privileges Required	None	None
User Interaction	None	None
Scope	Unchanged	Unchanged
Confidentiality Impact	None	None
Integrity Impact	None	None
Availability Impact	High	High
CVSSv3 Version	3.1	3.1

Note from the SUSE Security Team

This issue affects our openssl 1.0, 1.1.0 and 1.1.1 versions. Our openssl 0.9.8j is not affected, as the issue was introduced in openssl 0.9.8k.

SUSE Bugzilla entry: 1179491 [IN_PROGRESS]

SUSE Security Advisories:

• SUSE-CU-2020:767-1, published Wed Dec 9 23:54:02 MST 2020
• SUSE-CU-2020:768-1, published Thu Dec 10 00:08:30 MST 2020
• SUSE-CU-2020:769-1, published Thu Dec 10 00:20:52 MST 2020
• SUSE-CU-2020:770-1, published Thu Dec 10 00:26:01 MST 2020
• SUSE-CU-2020:773-1, published Fri Dec 11 23:51:45 MST 2020
• SUSE-CU-2020:774-1, published Fri Dec 11 23:52:04 MST 2020
• SUSE-CU-2020:775-1, published Fri Dec 11 23:53:31 MST 2020
• SUSE-CU-2020:776-1, published Fri Dec 11 23:53:48 MST 2020
• SUSE-CU-2020:777-1, published Fri Dec 11 23:55:30 MST 2020
• SUSE-CU-2020:778-1, published Fri Dec 11 23:58:37 MST 2020
• SUSE-CU-2020:779-1, published Sat Dec 12 00:00:24 MST 2020
• SUSE-CU-2020:780-1, published Sat Dec 12 00:02:08 MST 2020
• SUSE-CU-2020:781-1, published Sat Dec 12 00:02:51 MST 2020
• SUSE-CU-2020:782-1, published Sat Dec 12 00:03:06 MST 2020
• SUSE-CU-2020:783-1, published Sat Dec 12 00:04:50 MST 2020
• SUSE-CU-2020:784-1, published Sat Dec 12 00:05:09 MST 2020
• SUSE-CU-2020:785-1, published Sat Dec 12 00:07:03 MST 2020
• SUSE-CU-2020:786-1, published Sat Dec 12 00:08:20 MST 2020
• SUSE-CU-2020:787-1, published Sat Dec 12 00:08:40 MST 2020
• SUSE-CU-2020:788-1, published Sat Dec 12 00:09:42 MST 2020
• SUSE-CU-2020:789-1, published Sat Dec 12 00:11:49 MST 2020
• SUSE-CU-2020:790-1, published Sat Dec 12 00:12:14 MST 2020
• SUSE-CU-2020:791-1, published Sat Dec 12 00:12:38 MST 2020
• SUSE-CU-2020:793-1, published Sat Dec 12 00:14:47 MST 2020
• SUSE-CU-2020:794-1, published Sat Dec 12 00:15:04 MST 2020
• SUSE-CU-2020:796-1, published Sat Dec 12 01:34:14 MST 2020
• SUSE-CU-2020:797-1, published Sat Dec 12 01:34:34 MST 2020
• SUSE-CU-2020:798-1, published Sat Dec 12 01:34:55 MST 2020
• SUSE-CU-2020:799-1, published Sat Dec 12 01:35:14 MST 2020
• SUSE-CU-2020:800-1, published Sat Dec 12 01:36:46 MST 2020
• SUSE-CU-2020:801-1, published Sat Dec 12 01:37:15 MST 2020
• SUSE-CU-2020:802-1, published Sat Dec 12 01:38:26 MST 2020
• SUSE-CU-2020:803-1, published Sat Dec 12 01:38:43 MST 2020
• SUSE-CU-2020:804-1, published Sat Dec 12 01:38:59 MST 2020
• SUSE-CU-2020:805-1, published Sat Dec 12 01:39:15 MST 2020
• SUSE-CU-2020:806-1, published Sat Dec 12 01:39:32 MST 2020
• SUSE-CU-2020:807-1, published Sat Dec 12 01:39:50 MST 2020
• SUSE-CU-2020:808-1, published Sat Dec 12 01:40:16 MST 2020
• SUSE-CU-2020:809-1, published Sat Dec 12 01:40:33 MST 2020
• SUSE-CU-2020:810-1, published Sat Dec 12 01:40:48 MST 2020
• SUSE-CU-2020:811-1, published Sat Dec 12 01:41:04 MST 2020
• SUSE-CU-2020:812-1, published Sat Dec 12 01:41:20 MST 2020
• SUSE-CU-2020:813-1, published Sat Dec 12 01:41:36 MST 2020
• SUSE-CU-2020:814-1, published Sat Dec 12 01:41:51 MST 2020
• SUSE-CU-2020:815-1, published Sat Dec 12 01:42:14 MST 2020
• SUSE-CU-2020:816-1, published Sat Dec 12 02:16:15 MST 2020
• SUSE-CU-2020:817-1, published Sat Dec 12 02:16:40 MST 2020
• SUSE-CU-2020:818-1, published Sat Dec 12 02:16:55 MST 2020
• SUSE-CU-2020:819-1, published Sat Dec 12 02:17:15 MST 2020
• SUSE-CU-2020:820-1, published Sat Dec 12 02:17:30 MST 2020
• SUSE-CU-2020:821-1, published Sat Dec 12 02:17:49 MST 2020
• SUSE-CU-2020:822-1, published Sat Dec 12 02:18:09 MST 2020
• SUSE-CU-2020:823-1, published Sat Dec 12 02:18:28 MST 2020
• SUSE-CU-2020:824-1, published Sat Dec 12 02:18:48 MST 2020
• SUSE-CU-2020:825-1, published Sat Dec 12 02:19:07 MST 2020
• SUSE-CU-2020:826-1, published Sat Dec 12 02:19:32 MST 2020
• SUSE-CU-2020:827-1, published Sat Dec 12 02:19:53 MST 2020
• SUSE-CU-2020:828-1, published Sat Dec 12 02:20:12 MST 2020
• SUSE-CU-2020:829-1, published Sat Dec 12 02:20:30 MST 2020
• SUSE-CU-2020:830-1, published Sat Dec 12 02:20:49 MST 2020
• SUSE-CU-2020:831-1, published Sat Dec 12 02:21:06 MST 2020
• SUSE-CU-2020:832-1, published Sat Dec 12 02:21:28 MST 2020
• SUSE-CU-2020:833-1, published Sat Dec 12 02:21:49 MST 2020
• SUSE-CU-2020:834-1, published Sat Dec 12 02:22:07 MST 2020
• SUSE-CU-2020:835-1, published Sat Dec 12 02:22:25 MST 2020
• SUSE-CU-2020:836-1, published Sat Dec 12 05:12:21 MST 2020
• SUSE-CU-2020:837-1, published Sat Dec 12 05:12:41 MST 2020
• SUSE-CU-2020:838-1, published Sat Dec 12 05:12:59 MST 2020
• SUSE-CU-2020:839-1, published Sat Dec 12 05:13:18 MST 2020
• SUSE-CU-2020:841-1, published Sat Dec 12 05:13:44 MST 2020
• SUSE-CU-2020:842-1, published Sat Dec 12 05:14:04 MST 2020
• SUSE-CU-2020:843-1, published Sat Dec 12 05:14:25 MST 2020
• SUSE-CU-2020:844-1, published Sat Dec 12 05:14:42 MST 2020
• SUSE-CU-2020:845-1, published Sat Dec 12 05:14:59 MST 2020
• SUSE-CU-2020:846-1, published Sat Dec 12 05:15:19 MST 2020
• SUSE-CU-2020:847-1, published Sat Dec 12 05:15:37 MST 2020
• SUSE-CU-2020:848-1, published Sat Dec 12 05:15:54 MST 2020
• SUSE-CU-2020:849-1, published Sat Dec 12 05:16:13 MST 2020
• SUSE-CU-2020:850-1, published Sat Dec 12 05:16:31 MST 2020
• SUSE-CU-2020:851-1, published Sat Dec 12 05:16:49 MST 2020
• SUSE-CU-2020:852-1, published Sat Dec 12 05:17:06 MST 2020
• SUSE-CU-2020:859-1, published Wed Dec 23 03:50:50 MST 2020
• SUSE-CU-2021:1-1, published Mon Jan 4 23:49:30 MST 2021
• SUSE-CU-2021:10-1, published Mon Jan 4 23:56:40 MST 2021
• SUSE-CU-2021:11-1, published Mon Jan 4 23:57:33 MST 2021
• SUSE-CU-2021:12-1, published Mon Jan 4 23:58:27 MST 2021
• SUSE-CU-2021:13-1, published Mon Jan 4 23:59:34 MST 2021
• SUSE-CU-2021:14-1, published Tue Jan 5 00:00:35 MST 2021
• SUSE-CU-2021:17-1, published Thu Jan 7 23:52:42 MST 2021
• SUSE-CU-2021:18-1, published Thu Jan 7 23:55:41 MST 2021
• SUSE-CU-2021:19-1, published Thu Jan 7 23:58:25 MST 2021
• SUSE-CU-2021:2-1, published Mon Jan 4 23:50:36 MST 2021
• SUSE-CU-2021:20-1, published Fri Jan 8 07:21:31 MST 2021
• SUSE-CU-2021:4-1, published Mon Jan 4 23:52:01 MST 2021
• SUSE-CU-2021:5-1, published Mon Jan 4 23:53:01 MST 2021
• SUSE-CU-2021:6-1, published Mon Jan 4 23:53:39 MST 2021
• SUSE-CU-2021:69-1, published Fri Mar 12 07:10:02 UTC 2021
• SUSE-CU-2021:7-1, published Mon Jan 4 23:54:17 MST 2021
• SUSE-CU-2021:71-1, published Fri Mar 12 07:11:29 UTC 2021
• SUSE-CU-2021:72-1, published Fri Mar 12 07:12:37 UTC 2021
• SUSE-CU-2021:73-1, published Fri Mar 12 07:13:46 UTC 2021
• SUSE-CU-2021:74-1, published Fri Mar 12 07:14:52 UTC 2021
• SUSE-CU-2021:75-1, published Fri Mar 12 07:16:03 UTC 2021
• SUSE-CU-2021:76-1, published Fri Mar 12 07:19:02 UTC 2021
• SUSE-CU-2021:8-1, published Mon Jan 4 23:55:25 MST 2021
• SUSE-CU-2021:9-1, published Mon Jan 4 23:56:17 MST 2021
• SUSE-CU-2021:94-1, published Sat Apr 3 06:08:05 UTC 2021
• SUSE-CU-2021:95-1, published Sat Apr 3 06:18:19 UTC 2021
• SUSE-CU-2021:97-1, published Fri Apr 9 06:01:49 UTC 2021
• SUSE-IU-2020:117-1, published Mon Dec 14 03:22:53 MST 2020
• SUSE-IU-2021:1-1, published Wed Feb 3 23:43:05 MST 2021
• SUSE-IU-2021:2-1, published Wed Feb 3 23:44:24 MST 2021
• SUSE-IU-2021:3-1, published Wed Feb 3 23:45:24 MST 2021
• SUSE-IU-2021:4-1, published Wed Feb 3 23:47:35 MST 2021
• SUSE-IU-2021:6-1, published Wed Feb 10 06:43:07 UTC 2021
• SUSE-IU-2021:7-1, published Wed Feb 10 06:48:24 UTC 2021
• SUSE-SU-2020:14560-1, published Wed Dec 9 16:16:47 MST 2020
• SUSE-SU-2020:3720-1, published Wed Dec 9 10:19:06 MST 2020
• SUSE-SU-2020:3721-1, published Wed Dec 9 10:23:44 MST 2020
• SUSE-SU-2020:3722-1, published Wed Dec 9 10:24:43 MST 2020
• SUSE-SU-2020:3732-1, published Wed Dec 9 16:19:49 MST 2020
• SUSE-SU-2020:3740-1, published Thu Dec 10 07:20:05 MST 2020
• SUSE-SU-2020:3762-1, published Fri Dec 11 10:19:26 MST 2020
• SUSE-SU-2020:3763-1, published Fri Dec 11 10:22:14 MST 2020
• SUSE-SU-2021:0060-1, published Mon Jan 11 10:28:31 MST 2021
• SUSE-SU-2021:0062-1, published Mon Jan 11 10:27:07 MST 2021
• SUSE-SU-2021:0068-1, published Mon Jan 11 10:20:42 MST 2021
• SUSE-SU-2021:0082-1, published Tue Jan 12 10:19:06 MST 2021
• openSUSE-SU-2020:2223-1, published Tue Feb 16 10:57:22 2021
• openSUSE-SU-2020:2236-1, published Tue Feb 16 10:57:22 2021
• openSUSE-SU-2020:2245-1, published Tue Feb 16 10:57:22 2021
• openSUSE-SU-2020:2269-1, published Tue Feb 16 10:57:22 2021
• openSUSE-SU-2021:0064-1, published Tue Feb 16 10:27:50 2021
• openSUSE-SU-2021:0065-1, published Tue Feb 16 10:27:50 2021
• openSUSE-SU-2021:0082-1, published Tue Feb 16 10:27:50 2021

List of released packages

Product(s)	Fixed package version(s)	References
Container caasp/v4.5/389-ds:1.4.3 Container caasp/v4.5/busybox:1.26.2 Container caasp/v4.5/caasp-dex:2.23.0 Container caasp/v4.5/cert-exporter:2.3.0 Container caasp/v4.5/cert-manager-cainjector:0.15.1 Container caasp/v4.5/cert-manager-controller:0.15.1 Container caasp/v4.5/cert-manager-webhook:0.15.1 Container caasp/v4.5/cilium-etcd-operator:2.0.5 Container caasp/v4.5/cilium-operator:1.7.6 Container caasp/v4.5/cilium:1.7.6 Container caasp/v4.5/configmap-reload:0.3.0 Container caasp/v4.5/coredns:1.6.7 Container caasp/v4.5/curl:7.66.0 Container caasp/v4.5/default-http-backend:0.15.0 Container caasp/v4.5/etcd:3.4.13 Container caasp/v4.5/gangway:3.1.0 Container caasp/v4.5/grafana:7.1.5 Container caasp/v4.5/helm-tiller:2.16.12 Container caasp/v4.5/istio-base:beta Container caasp/v4.5/istio-pilot:beta Container caasp/v4.5/istio-proxyv2:beta Container caasp/v4.5/k8s-sidecar:0.1.75 Container caasp/v4.5/kube-apiserver:v1.18.10 Container caasp/v4.5/kube-controller-manager:v1.18.10 Container caasp/v4.5/kube-proxy:v1.18.10 Container caasp/v4.5/kube-scheduler:v1.18.10 Container caasp/v4.5/kube-state-metrics:1.9.5 Container caasp/v4.5/kubernetes-client:1.18.10 Container caasp/v4.5/kucero:1.3.0 Container caasp/v4.5/kured:1.4.3 Container caasp/v4.5/metrics-server:0.3.6 Container caasp/v4.5/prometheus-alertmanager:0.16.2 Container caasp/v4.5/prometheus-node-exporter:1.0.1 Container caasp/v4.5/prometheus-pushgateway:0.6.0 Container caasp/v4.5/prometheus-server:2.18.0 Container caasp/v4.5/reloader:0.0.58 Container caasp/v4.5/rsyslog:8.39.0 Container caasp/v4.5/skuba-tooling:0.1.0 Container caasp/v4.5/velero-plugin-for-aws:1.1.0 Container caasp/v4.5/velero-plugin-for-gcp:1.1.0 Container caasp/v4.5/velero-plugin-for-microsoft-azure:1.1.0 Container caasp/v4.5/velero-restic-restore-helper:1.4.2 Container caasp/v4.5/velero:1.4.2 Container ingress-nginx-controller:0.15.0 Container suse/sle15:15.2 Container suse/sle15:15.3 Image SLES15-SP2-CHOST-BYOS-Aliyun Image SLES15-SP2-CHOST-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-EC2 Image SLES15-SP2-CHOST-BYOS-GCE Image caasp45/caasp-istio-base-image Image caasp45/caasp-k8s-sidecar-image	libopenssl1_1 >= 1.1.1d-11.12.1 openssl-1_1 >= 1.1.1d-11.12.1
Container caasp/v4/389-ds:1.4.2 Container caasp/v4/busybox:1.26.2 Container caasp/v4/caasp-dex:2.16.0 Container caasp/v4/cert-exporter:2.3.0 Container caasp/v4/cilium-etcd-operator:2.0.5 Container caasp/v4/cilium-init:1.5.3 Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container caasp/v4/cloud-provider-openstack:1.15.0 Container caasp/v4/configmap-reload:0.3.0 Container caasp/v4/coredns:1.6.7 Container caasp/v4/curl:7.60.0 Container caasp/v4/etcd:3.4.13 Container caasp/v4/gangway:3.1.0 Container caasp/v4/grafana:7.1.5 Container caasp/v4/helm-tiller:2.16.12 Container caasp/v4/hyperkube:v1.17.13 Container caasp/v4/kube-state-metrics:1.9.3 Container caasp/v4/kubernetes-client:1.17.13 Container caasp/v4/kucero:1.3.0 Container caasp/v4/kured:1.3.0 Container caasp/v4/metrics-server:0.3.6 Container caasp/v4/prometheus-alertmanager:0.16.2 Container caasp/v4/prometheus-node-exporter:1.0.1 Container caasp/v4/prometheus-pushgateway:0.6.0 Container caasp/v4/prometheus-server:2.7.1 Container caasp/v4/rsyslog:8.39.0 Container caasp/v4/skuba-tooling:0.1.0 Container caasp/v4/test-update:beta Container caasp/v4/velero-plugin-for-aws:1.0.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 Container caasp/v4/velero-restic-restore-helper:1.3.1 Container caasp/v4/velero:1.3.1 Container suse/sle15:15.1 Image SLES15-SP1-CHOST-BYOS-Azure Image SLES15-SP1-CHOST-BYOS-EC2 Image SLES15-SP1-CHOST-BYOS-GCE Image caasp4/caasp-k8s-sidecar-image	libopenssl1_1 >= 1.1.0i-14.12.1 openssl-1_1 >= 1.1.0i-14.12.1
Container suse/sle15:15.0 Image SLES15-EC2-CHOST-HVM-BYOS	libopenssl1_1 >= 1.1.0i-4.54.1 openssl-1_1 >= 1.1.0i-4.54.1
Container suse/sles12sp4:latest Container suse/sles12sp5:latest	libopenssl1_0_0 >= 1.0.2p-3.30.1 openssl-1_0_0 >= 1.0.2p-3.30.1
HPE Helion Openstack 8	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: HPE-Helion-OpenStack-8-2020-3763
Image caasp4/caasp-389-ds-image Image caasp4/caasp-busybox-image Image caasp4/caasp-caasp-dex-image Image caasp4/caasp-cert-exporter-image Image caasp4/caasp-cilium-etcd-operator-image Image caasp4/caasp-cilium-image Image caasp4/caasp-cilium-init-image Image caasp4/caasp-cilium-operator-image Image caasp4/caasp-cloud-provider-openstack-image Image caasp4/caasp-configmap-reload-image Image caasp4/caasp-coredns-image Image caasp4/caasp-curl-image Image caasp4/caasp-etcd-image Image caasp4/caasp-gangway-image Image caasp4/caasp-grafana-image Image caasp4/caasp-helm-tiller-image Image caasp4/caasp-hyperkube-image Image caasp4/caasp-kube-state-metrics-image Image caasp4/caasp-kubernetes-client-image Image caasp4/caasp-kured-image Image caasp4/caasp-metrics-server-image Image caasp4/caasp-prometheus-alertmanager-image Image caasp4/caasp-prometheus-node-exporter-image Image caasp4/caasp-prometheus-pushgateway-image Image caasp4/caasp-prometheus-server-image Image caasp4/caasp-rsyslog-image Image caasp4/caasp-test-update-image Image caasp4/caasp-velero-image Image caasp4/caasp-velero-plugin-for-aws-image Image caasp4/caasp-velero-plugin-for-gcp-image Image caasp4/caasp-velero-plugin-for-microsoft-azure-image Image caasp4/caasp-velero-restic-restore-helper-image	libopenssl1_1 >= 1.1.0i-14.12.1
Image caasp45/caasp-389-ds-image Image caasp45/caasp-busybox-image Image caasp45/caasp-caasp-dex-image Image caasp45/caasp-cert-manager-cainjector-image Image caasp45/caasp-cert-manager-controller-image Image caasp45/caasp-cert-manager-webhook-image Image caasp45/caasp-cilium-etcd-operator-image Image caasp45/caasp-cilium-image Image caasp45/caasp-cilium-operator-image Image caasp45/caasp-configmap-reload-image Image caasp45/caasp-coredns-image Image caasp45/caasp-curl-image Image caasp45/caasp-default-http-backend-image Image caasp45/caasp-etcd-image Image caasp45/caasp-gangway-image Image caasp45/caasp-grafana-image Image caasp45/caasp-helm-tiller-image Image caasp45/caasp-ingress-nginx-controller-image Image caasp45/caasp-istio-pilot-image Image caasp45/caasp-istio-proxyv2-image Image caasp45/caasp-kube-apiserver-image Image caasp45/caasp-kube-controller-manager-image Image caasp45/caasp-kube-proxy-image Image caasp45/caasp-kube-scheduler-image Image caasp45/caasp-kube-state-metrics-image Image caasp45/caasp-kubernetes-client-image Image caasp45/caasp-kucero-image Image caasp45/caasp-kured-image Image caasp45/caasp-metrics-server-image Image caasp45/caasp-prometheus-alertmanager-image Image caasp45/caasp-prometheus-node-exporter-image Image caasp45/caasp-prometheus-pushgateway-image Image caasp45/caasp-prometheus-server-image Image caasp45/caasp-reloader-image Image caasp45/caasp-rsyslog-image Image caasp45/caasp-skuba-tooling-image Image caasp45/caasp-velero-image Image caasp45/caasp-velero-plugin-for-aws-image Image caasp45/caasp-velero-plugin-for-gcp-image Image caasp45/caasp-velero-plugin-for-microsoft-azure-image Image caasp45/caasp-velero-restic-restore-helper-image	libopenssl1_1 >= 1.1.1d-11.12.1
SUSE Enterprise Storage 5	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-Storage-5-2020-3763
SUSE Enterprise Storage 6	libopenssl1_0_0 >= 1.0.2p-3.34.1 openssl-1_0_0 >= 1.0.2p-3.34.1	Patchnames: SUSE-Storage-6-2020-3762
SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS	libopenssl-1_1-devel >= 1.1.0i-4.54.1 libopenssl1_1 >= 1.1.0i-4.54.1 libopenssl1_1-32bit >= 1.1.0i-4.54.1 libopenssl1_1-hmac >= 1.1.0i-4.54.1 libopenssl1_1-hmac-32bit >= 1.1.0i-4.54.1 nodejs10 >= 10.23.1-1.30.1 nodejs10-devel >= 10.23.1-1.30.1 nodejs10-docs >= 10.23.1-1.30.1 npm10 >= 10.23.1-1.30.1 openssl-1_1 >= 1.1.0i-4.54.1	Patchnames: SUSE-SLE-Product-HPC-15-2020-3722 SUSE-SLE-Product-HPC-15-2021-60
SUSE Linux Enterprise Module for Basesystem 15 SP1	libopenssl-1_1-devel >= 1.1.0i-14.12.1 libopenssl-1_1-devel-32bit >= 1.1.0i-14.12.1 libopenssl1_1 >= 1.1.0i-14.12.1 libopenssl1_1-32bit >= 1.1.0i-14.12.1 libopenssl1_1-hmac >= 1.1.0i-14.12.1 libopenssl1_1-hmac-32bit >= 1.1.0i-14.12.1 openssl-1_1 >= 1.1.0i-14.12.1	Patchnames: SUSE-SLE-Module-Basesystem-15-SP1-2020-3720
SUSE Linux Enterprise Module for Basesystem 15 SP2	libopenssl-1_1-devel >= 1.1.1d-11.12.1 libopenssl1_1 >= 1.1.1d-11.12.1 libopenssl1_1-32bit >= 1.1.1d-11.12.1 libopenssl1_1-hmac >= 1.1.1d-11.12.1 libopenssl1_1-hmac-32bit >= 1.1.1d-11.12.1 openssl-1_1 >= 1.1.1d-11.12.1	Patchnames: SUSE-SLE-Module-Basesystem-15-SP2-2020-3721
SUSE Linux Enterprise Module for Legacy Software 15 SP1	libopenssl-1_0_0-devel >= 1.0.2p-3.34.1 libopenssl1_0_0 >= 1.0.2p-3.34.1 openssl-1_0_0 >= 1.0.2p-3.34.1	Patchnames: SUSE-SLE-Module-Legacy-15-SP1-2020-3762
SUSE Linux Enterprise Module for Legacy Software 15 SP2	libopenssl-1_0_0-devel >= 1.0.2p-3.34.1 libopenssl1_0_0 >= 1.0.2p-3.34.1 openssl-1_0_0 >= 1.0.2p-3.34.1	Patchnames: SUSE-SLE-Module-Legacy-15-SP2-2020-3762
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1	libopenssl-1_0_0-devel-32bit >= 1.0.2p-3.34.1 libopenssl-1_1-devel-32bit >= 1.1.0i-14.12.1 libopenssl1_0_0-32bit >= 1.0.2p-3.34.1 libopenssl1_0_0-hmac >= 1.0.2p-3.34.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-3.34.1 libopenssl1_0_0-steam >= 1.0.2p-3.34.1 libopenssl1_0_0-steam-32bit >= 1.0.2p-3.34.1 openssl-1_0_0 >= 1.0.2p-3.34.1 openssl-1_0_0-cavs >= 1.0.2p-3.34.1 openssl-1_0_0-doc >= 1.0.2p-3.34.1 openssl-1_1 >= 1.1.0i-14.12.1 openssl-1_1-doc >= 1.1.0i-14.12.1	Patchnames: SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-3720 SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-3762
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2	libopenssl-1_0_0-devel-32bit >= 1.0.2p-3.34.1 libopenssl-1_1-devel-32bit >= 1.1.1d-11.12.1 libopenssl1_0_0-32bit >= 1.0.2p-3.34.1 libopenssl1_0_0-hmac >= 1.0.2p-3.34.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-3.34.1 libopenssl1_0_0-steam >= 1.0.2p-3.34.1 libopenssl1_0_0-steam-32bit >= 1.0.2p-3.34.1 openssl-1_0_0 >= 1.0.2p-3.34.1 openssl-1_0_0-cavs >= 1.0.2p-3.34.1 openssl-1_0_0-doc >= 1.0.2p-3.34.1 openssl-1_1 >= 1.1.1d-11.12.1 openssl-1_1-doc >= 1.1.1d-11.12.1	Patchnames: SUSE-SLE-Module-Development-Tools-OBS-15-SP2-2020-3721 SUSE-SLE-Module-Development-Tools-OBS-15-SP2-2020-3762
SUSE Linux Enterprise Module for Web Scripting 12	nodejs10 >= 10.23.1-1.33.1 nodejs10-devel >= 10.23.1-1.33.1 nodejs10-docs >= 10.23.1-1.33.1 nodejs12 >= 12.20.1-1.26.1 nodejs12-devel >= 12.20.1-1.26.1 nodejs12-docs >= 12.20.1-1.26.1 npm10 >= 10.23.1-1.33.1 npm12 >= 12.20.1-1.26.1	Patchnames: SUSE-SLE-Module-Web-Scripting-12-2021-68 SUSE-SLE-Module-Web-Scripting-12-2021-82
SUSE Linux Enterprise Module for Web Scripting 15 SP1	nodejs10 >= 10.23.1-1.30.1 nodejs10-devel >= 10.23.1-1.30.1 nodejs10-docs >= 10.23.1-1.30.1 npm10 >= 10.23.1-1.30.1	Patchnames: SUSE-SLE-Module-Web-Scripting-15-SP1-2021-60
SUSE Linux Enterprise Module for Web Scripting 15 SP2	nodejs10 >= 10.23.1-1.30.1 nodejs10-devel >= 10.23.1-1.30.1 nodejs10-docs >= 10.23.1-1.30.1 nodejs12 >= 12.20.1-4.10.1 nodejs12-devel >= 12.20.1-4.10.1 nodejs12-docs >= 12.20.1-4.10.1 npm10 >= 10.23.1-1.30.1 npm12 >= 12.20.1-4.10.1	Patchnames: SUSE-SLE-Module-Web-Scripting-15-SP2-2021-60 SUSE-SLE-Module-Web-Scripting-15-SP2-2021-62
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-SLE-POS-12-SP2-CLIENT-2020-3763
SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server for SAP Applications 11-SECURITY	libopenssl1-devel >= 1.0.1g-0.58.30.1 libopenssl1_0_0 >= 1.0.1g-0.58.30.1 libopenssl1_0_0-32bit >= 1.0.1g-0.58.30.1 libopenssl1_0_0-x86 >= 1.0.1g-0.58.30.1 openssl1 >= 1.0.1g-0.58.30.1 openssl1-doc >= 1.0.1g-0.58.30.1	Patchnames: secsp3-openssl1-14560
SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server for SAP Applications 12 SP2-BCL	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-SLE-SERVER-12-SP2-BCL-2020-3763
SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP2-ESPOS	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-SLE-SERVER-12-SP2-ESPOS-2020-3763
SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2-LTSS	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-SLE-SERVER-12-SP2-2020-3763
SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-SLE-SERVER-12-SP3-BCL-2020-3763
SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-SLE-SERVER-12-SP3-ESPOS-2020-3763
SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3-LTSS	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-SLE-SERVER-12-SP3-2020-3763
SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS	libopenssl-1_0_0-devel >= 1.0.2p-3.30.1 libopenssl1_0_0 >= 1.0.2p-3.30.1 libopenssl1_0_0-32bit >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-3.30.1 libopenssl1_1 >= 1.1.1d-2.27.1 libopenssl1_1-32bit >= 1.1.1d-2.27.1 openssl-1_0_0 >= 1.0.2p-3.30.1 openssl-1_0_0-doc >= 1.0.2p-3.30.1 openssl-1_1 >= 1.1.1d-2.27.1	Patchnames: SUSE-SLE-SERVER-12-SP4-ESPOS-2020-3732 SUSE-SLE-SERVER-12-SP4-ESPOS-2020-3740
SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS	libopenssl-1_0_0-devel >= 1.0.2p-3.30.1 libopenssl1_0_0 >= 1.0.2p-3.30.1 libopenssl1_0_0-32bit >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-3.30.1 libopenssl1_1 >= 1.1.1d-2.27.1 libopenssl1_1-32bit >= 1.1.1d-2.27.1 openssl-1_0_0 >= 1.0.2p-3.30.1 openssl-1_0_0-doc >= 1.0.2p-3.30.1 openssl-1_1 >= 1.1.1d-2.27.1	Patchnames: SUSE-SLE-SERVER-12-SP4-LTSS-2020-3732 SUSE-SLE-SERVER-12-SP4-LTSS-2020-3740
SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5	libopenssl-1_0_0-devel >= 1.0.2p-3.30.1 libopenssl1_0_0 >= 1.0.2p-3.30.1 libopenssl1_0_0-32bit >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-3.30.1 libopenssl1_1 >= 1.1.1d-2.27.1 libopenssl1_1-32bit >= 1.1.1d-2.27.1 openssl-1_0_0 >= 1.0.2p-3.30.1 openssl-1_0_0-doc >= 1.0.2p-3.30.1 openssl-1_1 >= 1.1.1d-2.27.1	Patchnames: SUSE-SLE-SERVER-12-SP5-2020-3732 SUSE-SLE-SERVER-12-SP5-2020-3740
SUSE Linux Enterprise Server 15-LTSS	libopenssl-1_0_0-devel >= 1.0.2p-3.34.1 libopenssl-1_1-devel >= 1.1.0i-4.54.1 libopenssl1_0_0 >= 1.0.2p-3.34.1 libopenssl1_1 >= 1.1.0i-4.54.1 libopenssl1_1-32bit >= 1.1.0i-4.54.1 libopenssl1_1-hmac >= 1.1.0i-4.54.1 libopenssl1_1-hmac-32bit >= 1.1.0i-4.54.1 nodejs10 >= 10.23.1-1.30.1 nodejs10-devel >= 10.23.1-1.30.1 nodejs10-docs >= 10.23.1-1.30.1 npm10 >= 10.23.1-1.30.1 openssl-1_0_0 >= 1.0.2p-3.34.1 openssl-1_1 >= 1.1.0i-4.54.1	Patchnames: SUSE-SLE-Product-SLES-15-2020-3722 SUSE-SLE-Product-SLES-15-2020-3762 SUSE-SLE-Product-SLES-15-2021-60
SUSE Linux Enterprise Server for SAP Applications 12 SP2	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-SLE-SAP-12-SP2-2020-3763
SUSE Linux Enterprise Server for SAP Applications 12 SP3	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-SLE-SAP-12-SP3-2020-3763
SUSE Linux Enterprise Server for SAP Applications 12 SP4	libopenssl-1_0_0-devel >= 1.0.2p-3.30.1 libopenssl1_0_0 >= 1.0.2p-3.30.1 libopenssl1_0_0-32bit >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-3.30.1 libopenssl1_1 >= 1.1.1d-2.27.1 libopenssl1_1-32bit >= 1.1.1d-2.27.1 openssl-1_0_0 >= 1.0.2p-3.30.1 openssl-1_0_0-doc >= 1.0.2p-3.30.1 openssl-1_1 >= 1.1.1d-2.27.1	Patchnames: SUSE-SLE-SAP-12-SP4-2020-3732 SUSE-SLE-SAP-12-SP4-2020-3740
SUSE Linux Enterprise Server for SAP Applications 15	libopenssl-1_0_0-devel >= 1.0.2p-3.34.1 libopenssl-1_1-devel >= 1.1.0i-4.54.1 libopenssl1_0_0 >= 1.0.2p-3.34.1 libopenssl1_1 >= 1.1.0i-4.54.1 libopenssl1_1-32bit >= 1.1.0i-4.54.1 libopenssl1_1-hmac >= 1.1.0i-4.54.1 libopenssl1_1-hmac-32bit >= 1.1.0i-4.54.1 nodejs10 >= 10.23.1-1.30.1 nodejs10-devel >= 10.23.1-1.30.1 nodejs10-docs >= 10.23.1-1.30.1 npm10 >= 10.23.1-1.30.1 openssl-1_0_0 >= 1.0.2p-3.34.1 openssl-1_1 >= 1.1.0i-4.54.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-2020-3722 SUSE-SLE-Product-SLES_SAP-15-2020-3762 SUSE-SLE-Product-SLES_SAP-15-2021-60
SUSE Linux Enterprise Software Development Kit 12 SP5	libopenssl-1_0_0-devel >= 1.0.2p-3.30.1 libopenssl-1_1-devel >= 1.1.1d-2.27.1 libopenssl-1_1-devel-32bit >= 1.1.1d-2.27.1 openssl-1_0_0 >= 1.0.2p-3.30.1 openssl-1_1 >= 1.1.1d-2.27.1	Patchnames: SUSE-SLE-SDK-12-SP5-2020-3732 SUSE-SLE-SDK-12-SP5-2020-3740
SUSE OpenStack Cloud 7	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-OpenStack-Cloud-7-2020-3763
SUSE OpenStack Cloud 8	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-OpenStack-Cloud-8-2020-3763
SUSE OpenStack Cloud 9	libopenssl-1_0_0-devel >= 1.0.2p-3.30.1 libopenssl1_0_0 >= 1.0.2p-3.30.1 libopenssl1_0_0-32bit >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-3.30.1 libopenssl1_1 >= 1.1.1d-2.27.1 libopenssl1_1-32bit >= 1.1.1d-2.27.1 openssl-1_0_0 >= 1.0.2p-3.30.1 openssl-1_0_0-doc >= 1.0.2p-3.30.1 openssl-1_1 >= 1.1.1d-2.27.1	Patchnames: SUSE-OpenStack-Cloud-9-2020-3732 SUSE-OpenStack-Cloud-9-2020-3740
SUSE OpenStack Cloud Crowbar 8	libopenssl-devel >= 1.0.2j-60.63.1 libopenssl1_0_0 >= 1.0.2j-60.63.1 libopenssl1_0_0-32bit >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac >= 1.0.2j-60.63.1 libopenssl1_0_0-hmac-32bit >= 1.0.2j-60.63.1 openssl >= 1.0.2j-60.63.1 openssl-doc >= 1.0.2j-60.63.1	Patchnames: SUSE-OpenStack-Cloud-Crowbar-8-2020-3763
SUSE OpenStack Cloud Crowbar 9	libopenssl-1_0_0-devel >= 1.0.2p-3.30.1 libopenssl1_0_0 >= 1.0.2p-3.30.1 libopenssl1_0_0-32bit >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac >= 1.0.2p-3.30.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-3.30.1 libopenssl1_1 >= 1.1.1d-2.27.1 libopenssl1_1-32bit >= 1.1.1d-2.27.1 openssl-1_0_0 >= 1.0.2p-3.30.1 openssl-1_0_0-doc >= 1.0.2p-3.30.1 openssl-1_1 >= 1.1.1d-2.27.1	Patchnames: SUSE-OpenStack-Cloud-Crowbar-9-2020-3732 SUSE-OpenStack-Cloud-Crowbar-9-2020-3740
openSUSE Leap 15.1	libopenssl-1_0_0-devel >= 1.0.2p-lp151.5.20.1 libopenssl-1_0_0-devel-32bit >= 1.0.2p-lp151.5.20.1 libopenssl-1_1-devel >= 1.1.0i-lp151.8.12.2 libopenssl-1_1-devel-32bit >= 1.1.0i-lp151.8.12.2 libopenssl10 >= 1.0.2p-lp151.5.20.1 libopenssl10-debuginfo >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0 >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0-32bit >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0-32bit-debuginfo >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0-debuginfo >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0-hmac >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0-steam >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0-steam-32bit >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0-steam-32bit-debuginfo >= 1.0.2p-lp151.5.20.1 libopenssl1_0_0-steam-debuginfo >= 1.0.2p-lp151.5.20.1 libopenssl1_1 >= 1.1.0i-lp151.8.12.2 libopenssl1_1-32bit >= 1.1.0i-lp151.8.12.2 libopenssl1_1-32bit-debuginfo >= 1.1.0i-lp151.8.12.2 libopenssl1_1-debuginfo >= 1.1.0i-lp151.8.12.2 libopenssl1_1-hmac >= 1.1.0i-lp151.8.12.2 libopenssl1_1-hmac-32bit >= 1.1.0i-lp151.8.12.2 nodejs10 >= 10.23.1-lp151.2.15.1 nodejs10-debuginfo >= 10.23.1-lp151.2.15.1 nodejs10-debugsource >= 10.23.1-lp151.2.15.1 nodejs10-devel >= 10.23.1-lp151.2.15.1 nodejs10-docs >= 10.23.1-lp151.2.15.1 npm10 >= 10.23.1-lp151.2.15.1 openssl-1_0_0 >= 1.0.2p-lp151.5.20.1 openssl-1_0_0-cavs >= 1.0.2p-lp151.5.20.1 openssl-1_0_0-cavs-debuginfo >= 1.0.2p-lp151.5.20.1 openssl-1_0_0-debuginfo >= 1.0.2p-lp151.5.20.1 openssl-1_0_0-debugsource >= 1.0.2p-lp151.5.20.1 openssl-1_0_0-doc >= 1.0.2p-lp151.5.20.1 openssl-1_1 >= 1.1.0i-lp151.8.12.2 openssl-1_1-debuginfo >= 1.1.0i-lp151.8.12.2 openssl-1_1-debugsource >= 1.1.0i-lp151.8.12.2 openssl-1_1-doc >= 1.1.0i-lp151.8.12.2	Patchnames: openSUSE-2020-2245 openSUSE-2020-2269 openSUSE-2021-82
openSUSE Leap 15.2	libopenssl-1_0_0-devel >= 1.0.2p-lp152.8.9.1 libopenssl-1_0_0-devel-32bit >= 1.0.2p-lp152.8.9.1 libopenssl-1_1-devel >= 1.1.1d-lp152.7.9.1 libopenssl-1_1-devel-32bit >= 1.1.1d-lp152.7.9.1 libopenssl10 >= 1.0.2p-lp152.8.9.1 libopenssl10-debuginfo >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0 >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0-32bit >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0-32bit-debuginfo >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0-debuginfo >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0-hmac >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0-hmac-32bit >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0-steam >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0-steam-32bit >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0-steam-32bit-debuginfo >= 1.0.2p-lp152.8.9.1 libopenssl1_0_0-steam-debuginfo >= 1.0.2p-lp152.8.9.1 libopenssl1_1 >= 1.1.1d-lp152.7.9.1 libopenssl1_1-32bit >= 1.1.1d-lp152.7.9.1 libopenssl1_1-32bit-debuginfo >= 1.1.1d-lp152.7.9.1 libopenssl1_1-debuginfo >= 1.1.1d-lp152.7.9.1 libopenssl1_1-hmac >= 1.1.1d-lp152.7.9.1 libopenssl1_1-hmac-32bit >= 1.1.1d-lp152.7.9.1 nodejs10 >= 10.23.1-lp152.2.9.1 nodejs10-debuginfo >= 10.23.1-lp152.2.9.1 nodejs10-debugsource >= 10.23.1-lp152.2.9.1 nodejs10-devel >= 10.23.1-lp152.2.9.1 nodejs10-docs >= 10.23.1-lp152.2.9.1 nodejs12 >= 12.20.1-lp152.3.9.1 nodejs12-debuginfo >= 12.20.1-lp152.3.9.1 nodejs12-debugsource >= 12.20.1-lp152.3.9.1 nodejs12-devel >= 12.20.1-lp152.3.9.1 nodejs12-docs >= 12.20.1-lp152.3.9.1 npm10 >= 10.23.1-lp152.2.9.1 npm12 >= 12.20.1-lp152.3.9.1 openssl-1_0_0 >= 1.0.2p-lp152.8.9.1 openssl-1_0_0-cavs >= 1.0.2p-lp152.8.9.1 openssl-1_0_0-cavs-debuginfo >= 1.0.2p-lp152.8.9.1 openssl-1_0_0-debuginfo >= 1.0.2p-lp152.8.9.1 openssl-1_0_0-debugsource >= 1.0.2p-lp152.8.9.1 openssl-1_0_0-doc >= 1.0.2p-lp152.8.9.1 openssl-1_1 >= 1.1.1d-lp152.7.9.1 openssl-1_1-debuginfo >= 1.1.1d-lp152.7.9.1 openssl-1_1-debugsource >= 1.1.1d-lp152.7.9.1 openssl-1_1-doc >= 1.1.1d-lp152.7.9.1	Patchnames: openSUSE-2020-2223 openSUSE-2020-2236 openSUSE-2021-64 openSUSE-2021-65

---

First public cloud image revisions this CVE is fixed in:

• alibaba/sles-15-sp2-chost-byos-v20210202
• alibaba/sles-15-sp2-chost-byos-v20210304
• amazon/suse-sles-12-sp4-byos-v20210217-hvm-ssd-x86_64
• amazon/suse-sles-12-sp5-byos-v20210215-hvm-ssd-x86_64
• amazon/suse-sles-12-sp5-v20210212-hvm-ssd-x86_64
• amazon/suse-sles-12-sp5-v20210216-ecs-hvm-ssd-x86_64
• amazon/suse-sles-15-sp1-chost-byos-v20210202-hvm-ssd-x86_64
• amazon/suse-sles-15-sp2-chost-byos-v20210202-hvm-ssd-x86_64
• amazon/suse-sles-sap-12-sp4-byos-v20210217-hvm-ssd-x86_64
• amazon/suse-sles-sap-12-sp5-byos-v20210215-hvm-ssd-x86_64
• google/sles-12-sp4-byos-v20210210
• google/sles-12-sp4-sap-byos-v20210210
• google/sles-12-sp4-sap-v20210210
• google/sles-12-sp5-byos-v20210209
• google/sles-12-sp5-sap-byos-v20210204
• google/sles-12-sp5-sap-v20210204
• google/sles-12-sp5-v20210204
• google/sles-15-sp1-byos-v20210208
• google/sles-15-sp1-chost-byos-v20210202
• google/sles-15-sp1-sap-byos-v20210208
• google/sles-15-sp1-sap-v20210208
• google/sles-15-sp2-byos-v20210204
• google/sles-15-sp2-chost-byos-v20210202
• google/sles-15-sp2-sap-byos-v20210204
• google/sles-15-sp2-sap-v20210204
• google/sles-15-sp2-v20210204
• google/suse-manager-4-0-proxy-byos-v20210209
• google/suse-manager-4-0-server-byos-v20210209
• google/suse-manager-4-1-proxy-byos-v20210209
• google/suse-manager-4-1-server-byos-v20210209
• oracle/sles-15-sp2-byos-v20210303
• oracle/sles-15-sp2-sap-byos-v20210303

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification.

Product(s)	Source package	State
Carwos 1	openssl-1_1	Analysis
HPE Helion OpenStack 8	openssl	Released
SUSE CaaS Platform 4.0	openssl-1_0_0	Released
SUSE Enterprise Storage 5	openssl	Released
SUSE Enterprise Storage 6	openssl-1_0_0	Released
SUSE Linux Enterprise High Performance Computing 12 SP5	openssl	Not affected
SUSE Linux Enterprise High Performance Computing 12 SP5	openssl-1_0_0	Released
SUSE Linux Enterprise High Performance Computing 12 SP5	openssl-1_1	Released
SUSE Linux Enterprise High Performance Computing 15 LTSS	openssl	Not affected
SUSE Linux Enterprise High Performance Computing 15 LTSS	openssl-1_1	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP1	openssl	Unsupported
SUSE Linux Enterprise Module for Basesystem 15 SP1	openssl-1_1	Released
SUSE Linux Enterprise Module for Basesystem 15 SP2	openssl	Not affected
SUSE Linux Enterprise Module for Basesystem 15 SP2	openssl-1_1	Affected
SUSE Linux Enterprise Module for Legacy 12	compat-openssl098	Not affected
SUSE Linux Enterprise Module for Legacy 15 SP1	openssl-1_0_0	Released
SUSE Linux Enterprise Module for Legacy 15 SP2	openssl-1_0_0	Released
SUSE Linux Enterprise Module for Web and Scripting 12	nodejs10	Released
SUSE Linux Enterprise Module for Web and Scripting 12	nodejs12	Released
SUSE Linux Enterprise Module for Web and Scripting 15 SP1	nodejs10	Released
SUSE Linux Enterprise Module for Web and Scripting 15 SP2	nodejs10	Released
SUSE Linux Enterprise Module for Web and Scripting 15 SP2	nodejs12	Released
SUSE Linux Enterprise Point of Service 11 SP3	openssl	Not affected
SUSE Linux Enterprise Point of Service Image Server 12	openssl	Released
SUSE Linux Enterprise Server 11 SP4 LTSS	openssl	Not affected
SUSE Linux Enterprise Server 12 SP2 BCL	openssl	Released
SUSE Linux Enterprise Server 12 SP2 ESPOS	openssl	Released
SUSE Linux Enterprise Server 12 SP2 LTSS	openssl	Released
SUSE Linux Enterprise Server 12 SP2 LTSS ERICSSON	openssl	Released
SUSE Linux Enterprise Server 12 SP2 LTSS SAP	openssl	Released
SUSE Linux Enterprise Server 12 SP3 BCL	openssl	Released
SUSE Linux Enterprise Server 12 SP3 ESPOS	openssl	Released
SUSE Linux Enterprise Server 12 SP3 LTSS	openssl	Released
SUSE Linux Enterprise Server 12 SP4 ESPOS	openssl	Not affected
SUSE Linux Enterprise Server 12 SP4 ESPOS	openssl-1_0_0	Affected
SUSE Linux Enterprise Server 12 SP4 ESPOS	openssl-1_1	Released
SUSE Linux Enterprise Server 12 SP4 LTSS	openssl	Not affected
SUSE Linux Enterprise Server 12 SP4 LTSS	openssl-1_0_0	Affected
SUSE Linux Enterprise Server 12 SP4 LTSS	openssl-1_1	Released
SUSE Linux Enterprise Server 12 SP5	openssl	Not affected
SUSE Linux Enterprise Server 12 SP5	openssl-1_0_0	Released
SUSE Linux Enterprise Server 12 SP5	openssl-1_1	Released
SUSE Linux Enterprise Server 15 LTSS	openssl	Not affected
SUSE Linux Enterprise Server 15 LTSS	openssl-1_0_0	Released
SUSE Linux Enterprise Server 15 LTSS	openssl-1_1	Affected
SUSE Linux Enterprise Server 15 SP1 Business Critical Linux	openssl-1_0_0	Released
SUSE Linux Enterprise Server 15 SP1 LTSS	openssl-1_0_0	Released
SUSE Linux Enterprise Server ESPOS 15	openssl	Not affected
SUSE Linux Enterprise Server ESPOS 15	openssl-1_1	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP2	openssl	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	compat-openssl098	Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP3	openssl	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP4	compat-openssl098	Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4	openssl	Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4	openssl-1_0_0	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4	openssl-1_1	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP5	compat-openssl098	Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP5	openssl	Not affected
SUSE Linux Enterprise Server for SAP Applications 12 SP5	openssl-1_0_0	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP5	openssl-1_1	Released
SUSE Linux Enterprise Server for SAP Applications 15	openssl	Not affected
SUSE Linux Enterprise Server for SAP Applications 15	openssl-1_0_0	Released
SUSE Linux Enterprise Server for SAP Applications 15	openssl-1_1	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1	openssl-1_0_0	Released
SUSE Linux Enterprise Software Development Kit 12 SP5	openssl-1_1	Released
SUSE Manager Proxy 4.0	openssl-1_0_0	Released
SUSE Manager Retail Branch Server 4.0	openssl-1_0_0	Released
SUSE Manager Server 4.0	openssl-1_0_0	Released
SUSE OpenStack Cloud 7	openssl	Released
SUSE OpenStack Cloud 8	openssl	Released
SUSE OpenStack Cloud 9	openssl	Not affected
SUSE OpenStack Cloud 9	openssl-1_0_0	Affected
SUSE OpenStack Cloud 9	openssl-1_1	Released
SUSE OpenStack Cloud Crowbar 8	openssl	Released
SUSE OpenStack Cloud Crowbar 9	openssl	Not affected
SUSE OpenStack Cloud Crowbar 9	openssl-1_0_0	Affected
SUSE OpenStack Cloud Crowbar 9	openssl-1_1	Released
Security Module for SUSE Linux Enterprise 11	openssl1	Released