This update for openssl-1_1 fixes the following security issues:
CVE-2021-3711: A bug in the implementation of the SM2 decryption code could lead to buffer overflows. [bsc#1189520]
CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attack. [bsc#1189521]
This update was imported from the SUSE:SLE-15-SP2:Update update project.
{ "binaries": [ { "libopenssl1_1-32bit": "1.1.1d-lp152.7.21.1", "openssl-1_1": "1.1.1d-lp152.7.21.1", "libopenssl1_1-hmac-32bit": "1.1.1d-lp152.7.21.1", "libopenssl-1_1-devel-32bit": "1.1.1d-lp152.7.21.1", "libopenssl1_1-hmac": "1.1.1d-lp152.7.21.1", "libopenssl-1_1-devel": "1.1.1d-lp152.7.21.1", "openssl-1_1-doc": "1.1.1d-lp152.7.21.1", "libopenssl1_1": "1.1.1d-lp152.7.21.1" } ] }