SUSE: 2023:2160-2 Moderate: OpenSSL Timing Vulnerability in SUSE/SLE15

References : 1201627 1207534 CVE-2022-4304

1201627,1207534,CVE-2022-4304

This update for openssl-1_1 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.

The previous fix for this timing side channel turned out to cause a

severe 2-3x performance regression in the typical use case (bsc#1207534).

- Update further expiring certificates that affect the testsuite (bsc#1201627).

The following package changes have been done:

- libopenssl1_1-hmac-1.1.1l-150400.7.42.1 updated

- libopenssl1_1-1.1.1l-150400.7.42.1 updated

- openssl-1_1-1.1.1l-150400.7.42.1 updated