Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2023:2158-2 Critical: libcurl Authentication Vulnerability

suse
Calendar Grey June 28, 2023
Dist Suse Esm H88
SUSE Container Upgrade Notification for suse/pcp encompasses crucial security updates featuring enhancements to openssl among others.
The container suse/pcp was updated

Summary

Advisory ID: SUSE-SU-2023:2648-1 Released: Tue Jun 27 09:52:35 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate severity security patch timing attack suse openssl container update

References

References : 1201627 1207534 CVE-2022-4304

1201627,1207534,CVE-2022-4304

This update for openssl-1_1 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.

The previous fix for this timing side channel turned out to cause a

severe 2-3x performance regression in the typical use case (bsc#1207534).

- Update further expiring certificates that affect the testsuite (bsc#1201627).

The following package changes have been done:

- libopenssl1_1-1.1.1l-150400.7.42.1 updated

- libopenssl1_1-hmac-1.1.1l-150400.7.42.1 updated

- container:bci-bci-init-15.4-15.4-29.3 updated

Container Advisory ID : SUSE-CU-2023:2158-1
Container Tags : suse/pcp:5 , suse/pcp:5-17.15 , suse/pcp:5.2 , suse/pcp:5.2-17.15 , suse/pcp:5.2.5 , suse/pcp:5.2.5-17.15
Container Release : 17.15
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate severity security patch timing attack suse openssl container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here