Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2023:874-1 Moderate: OpenSSL Resource Usage Issue

suse
Calendar Grey March 31, 2023
Scroller Suse
Uncover the latest SUSE container security patch for suse/sles12sp4, targeting OpenSSL vulnerabilities categorized with a moderate risk level.
The container suse/sles12sp4 was updated

Summary

Advisory ID: SUSE-SU-2023:1704-1 Released: Thu Mar 30 16:16:17 2023 Summary: Security update for openssl-1_0_0 Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate suse openssl container update resource usage

References

References : 1202062 1209624 CVE-2023-0464

1202062,1209624,CVE-2023-0464

This update for openssl-1_0_0 fixes the following issues:

Security fixes:

- CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).

Other fixes:

- Fix DH key generation in FIPS mode, add support for constant BN for DH parameters (bsc#1202062)

The following package changes have been done:

- base-container-licenses-3.0-1.341 updated

- container-suseconnect-2.0.0-1.224 updated

- libopenssl1_0_0-1.0.2p-3.69.1 updated

- openssl-1_0_0-1.0.2p-3.69.1 updated

Container Advisory ID : SUSE-CU-2023:874-1
Container Tags : suse/sles12sp4:26.581 , suse/sles12sp4:latest
Container Release : 26.581
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate suse openssl container update resource usage

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.