Debian: DSA-5343-1: openssl security update | LinuxSecurity.com

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5343-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
February 07, 2023                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openssl
CVE ID         : CVE-2022-2097 CVE-2022-4304 CVE-2022-4450 CVE-2023-0215
                 CVE-2023-0286
Debian Bug     : 1023424

Multiple vulnerabilities have been discovered in OpenSSL, a Secure
Sockets Layer toolkit, which may result in incomplete encryption, side
channel attacks, denial of service or information disclosure.

Additional details can be found in the upstream advisories at
https://www.openssl.org/news/secadv/20220705.txt and
https://www.openssl.org/news/secadv/20230207.txt

For the stable distribution (bullseye), these problems have been fixed in
version 1.1.1n-0+deb11u4.

We recommend that you upgrade your openssl packages.

For the detailed security status of openssl please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/openssl

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

Debian: DSA-5343-1: openssl security update

February 7, 2023
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in incomplete encryption, side channel attacks, denial of service or info...

Summary

Additional details can be found in the upstream advisories at
https://www.openssl.org/news/secadv/20220705.txt and
https://www.openssl.org/news/secadv/20230207.txt

For the stable distribution (bullseye), these problems have been fixed in
version 1.1.1n-0+deb11u4.

We recommend that you upgrade your openssl packages.

For the detailed security status of openssl please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/openssl

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

Severity
Multiple vulnerabilities have been discovered in OpenSSL, a Secure
Sockets Layer toolkit, which may result in incomplete encryption, side
channel attacks, denial of service or information disclosure.

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.