Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUZ: 2023:2301-2 Moderate: OpenSSL Timing Vulnerability Mitigation

suse
Calendar Grey June 25, 2023
Dist Suse Esm H88
Important upgrade for suse/sles12sp4 targeting CVE-2022-4304 in openssl-1_0_0 for enhanced efficiency.
The container suse/sles12sp4 was updated

Summary

Advisory ID: SUSE-SU-2023:2624-1 Released: Fri Jun 23 13:43:30 2023 Summary: Security update for openssl-1_0_0 Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory security update timing attack suse openssl performance fix container update

References

References : 1207534 CVE-2022-4304

1207534,CVE-2022-4304

This update for openssl-1_0_0 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.

The previous fix for this timing side channel turned out to cause a

severe 2-3x performance regression in the typical use case (bsc#1207534).

The following package changes have been done:

- base-container-licenses-3.0-1.356 updated

- container-suseconnect-2.0.0-1.238 updated

- libopenssl1_0_0-1.0.2p-3.78.1 updated

- openssl-1_0_0-1.0.2p-3.78.1 updated

Container Advisory ID : SUSE-CU-2023:2107-1
Container Tags : suse/sles12sp4:26.617 , suse/sles12sp4:latest
Container Release : 26.617
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory security update timing attack suse openssl performance fix container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here