Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:2109-1 moderate: openssl timing oracle issue

suse
Calendar Grey June 25, 2023
Dist Suse Esm H88
Keep abreast of current developments regarding suse/sle15, focusing on vulnerabilities and alterations in packages.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2023:2622-1 Released: Fri Jun 23 13:42:21 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate Advisory ID: SUSE-RU-2023:2625-1 Released: Fri Jun 23 17:16:11 2023 Summary: Recommended update for gcc12 Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate suse openssl gcc container

References

References : 1201627 1207534 CVE-2022-4304

1201627,1207534,CVE-2022-4304

This update for openssl-1_1 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.

The previous fix for this timing side channel turned out to cause a

severe 2-3x performance regression in the typical use case (bsc#1207534).

- Update further expiring certificates that affect tests [bsc#1201627]

* Add openssl-Update-further-expiring-certificates.patch

This update for gcc12 fixes the following issues:

- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204

* includes regression and other bug fixes

- Speed up builds with --enable-link-serialization.

- Update embedded newlib to version 4.2.0

The following package changes have been done:

Container Advisory ID : SUSE-CU-2023:2109-1
Container Tags : suse/sle15:15.1 , suse/sle15:15.1.6.2.782
Container Release : 6.2.782
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate suse openssl gcc container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here