SUSE Container Update Advisory: suse/pcp ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:2158-1 Container Tags : suse/pcp:5 , suse/pcp:5-17.15 , suse/pcp:5.2 , suse/pcp:5.2-17.15 , suse/pcp:5.2.5 , suse/pcp:5.2.5-17.15 Container Release : 17.15 Severity : moderate Type : security References : 1201627 1207534 CVE-2022-4304 ----------------------------------------------------------------- The container suse/pcp was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2648-1 Released: Tue Jun 27 09:52:35 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1201627,1207534,CVE-2022-4304 This update for openssl-1_1 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534). - Update further expiring certificates that affect the testsuite (bsc#1201627). The following package changes have been done: - libopenssl1_1-1.1.1l-150400.7.42.1 updated - libopenssl1_1-hmac-1.1.1l-150400.7.42.1 updated - container:bci-bci-init-15.4-15.4-29.3 updated