OPENSUSE-SU-2019:1147-1

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2019-1543
Published: 04 Apr 2019, 14:14
Last modified:04 Feb 2026, 02:16

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

04 Apr 2019, 14:14
Published
Vulnerability first disclosed
04 Feb 2026, 02:16
Last Modified
Vulnerability information updated

Description

Security update for openssl-1_1 This update for openssl-1_1 (OpenSSL Security Advisory [6 March 2019]) fixes the following issues: Security issue fixed: - CVE-2019-1543: Fixed an implementation error in ChaCha20-Poly1305 where it was allowed to set IV with more than 12 bytes (bsc#1128189). Other issues addressed: - Fixed a segfault in openssl speed when an unknown algorithm is passed (bsc#1125494). - Correctly skipped binary curves in openssl speed to avoid spitting errors (bsc#1116833). This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•openssl-1_1&distro=openSUSE Leap 15.0

    < 1.1.0i-lp150.3.22.3

References (5)