Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: CU-2023:2769-1 Moderate: OpenSSL DoS Fix Advisory

suse
Calendar Grey August 30, 2023
Dist Suse Esm H88
Keep updated on SUSE Container Update Notification for suse/sle15, covering security updates and corrections released in August 2023.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-SU-2023:3397-1 Released: Wed Aug 23 18:35:56 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate Advisory ID: SUSE-RU-2023:3410-1 Released: Thu Aug 24 06:56:32 2023 Summary: Recommended update for audit Type: recommended Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate security update DoS suse openssl fix audit update

References

References : 1201519 1204844 1213517 1213853 CVE-2023-3817

1213517,1213853,CVE-2023-3817

This update for openssl-1_1 fixes the following issues:

- CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)

- Don't pass zero length input to EVP_Cipher because s390x assembler optimized AES cannot handle zero size. (bsc#1213517)

1201519,1204844

This update for audit fixes the following issues:

- Create symbolic link from /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519)

- Fix rules not loaded when restarting auditd.service (bsc#1204844)

The following package changes have been done:

- libaudit1-3.0.6-150400.4.13.1 updated

- libopenssl1_1-hmac-1.1.1l-150400.7.53.1 updated

- libopenssl1_1-1.1.1l-150400.7.53.1 updated

Container Advisory ID : SUSE-CU-2023:2769-1
Container Tags : bci/bci-base:15.4 , bci/bci-base:15.4.27.14.90 , suse/sle15:15.4 , suse/sle15:15.4.27.14.90
Container Release : 27.14.90
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate security update DoS suse openssl fix audit update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here