SUSE: 2023:2109-1 suse/sle15 Security Update
Summary
Advisory ID: SUSE-SU-2023:2622-1 Released: Fri Jun 23 13:42:21 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate Advisory ID: SUSE-RU-2023:2625-1 Released: Fri Jun 23 17:16:11 2023 Summary: Recommended update for gcc12 Type: recommended Severity: moderate
References
References : 1201627 1207534 CVE-2022-4304
1201627,1207534,CVE-2022-4304
This update for openssl-1_1 fixes the following issues:
- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.
The previous fix for this timing side channel turned out to cause a
severe 2-3x performance regression in the typical use case (bsc#1207534).
- Update further expiring certificates that affect tests [bsc#1201627]
* Add openssl-Update-further-expiring-certificates.patch
This update for gcc12 fixes the following issues:
- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
* includes regression and other bug fixes
- Speed up builds with --enable-link-serialization.
- Update embedded newlib to version 4.2.0
The following package changes have been done:
- libgcc_s1-12.3.0+git1204-150000.1.10.1 updated
- libopenssl1_1-1.1.0i-150100.14.56.1 updated
- libstdc++6-12.3.0+git1204-150000.1.10.1 updated
- openssl-1_1-1.1.0i-150100.14.56.1 updated