Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2023:2526-1 Moderate: Toolbox OpenSSL Security Fix Advisory

suse
Calendar Grey August 8, 2023
Dist Suse Esm H88
SUSE Container Maintenance Notification: suse/sle-micro/5.2/toolbox Container Notification ID : SUSE-CM-2023:3487
The container suse/sle-micro/5.2/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:3179-1 Released: Thu Aug 3 13:59:38 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate severity suse openssl container

References

References : 1201627 1207534 1213487 CVE-2022-4304 CVE-2023-3446

1201627,1207534,1213487,CVE-2022-4304,CVE-2023-3446

This update for openssl-1_1 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.

The previous fix for this timing side channel turned out to cause a

severe 2-3x performance regression in the typical use case (bsc#1207534).

- CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).

- Update further expiring certificates that affect tests [bsc#1201627]

The following package changes have been done:

- libopenssl1_1-hmac-1.1.1d-150200.11.72.1 updated

- libopenssl1_1-1.1.1d-150200.11.72.1 updated

- openssl-1_1-1.1.1d-150200.11.72.1 updated

- container:sles15-image-15.0.0-17.20.163 updated

Container Advisory ID : SUSE-CU-2023:2526-1
Container Tags : suse/sle-micro/5.2/toolbox:12.1 , suse/sle-micro/5.2/toolbox:12.1-6.2.252 , suse/sle-micro/5.2/toolbox:latest
Container Release : 6.2.252
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate severity suse openssl container

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here