Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2023:4522-1 Important Update: OpenSSL Denial Of Service Threat

suse
Calendar Grey November 21, 2023
Dist Suse Esm H88
A vital security patch for OpenSSL tackles a vulnerability related to denial of service, affecting various versions of SUSE distributions.
* bsc#1216922 Cross-References: * CVE-2023-5678

Summary

## This update for openssl-1_0_0 fixes the following issues: * CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4522=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4522=1 * Legacy Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2023-4522=1 * Legacy Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP5-2023-4522=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3

Topics%20covered

Topics Covered

security advisory denial of service patch suse openssl important update linux enterprise

References

* bsc#1216922

Cross-

* CVE-2023-5678

CVSS scores:

* CVE-2023-5678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-5678 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products:

* Legacy Module 15-SP4

* Legacy Module 15-SP5

* openSUSE Leap 15.4

* openSUSE Leap 15.5

* SUSE CaaS Platform 4.0

* SUSE Enterprise Storage 7.1

* SUSE Linux Enterprise High Performance Computing 15 SP3

* SUSE Linux Enterprise High Performance Computing 15 SP4

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3

* SUSE Linux Enterprise Server 15 SP1

* SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1

* SUSE Linux Enterprise Server 15 SP2

* SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2

* SUSE Linux Enterprise Server 15 SP3

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:4522-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service patch suse openssl important update linux enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here