Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2023-0464 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3449-1
The container suse/389-ds was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/389-ds ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:1189-1 Container Tags : suse/389-ds:2.0 , suse/389-ds:2.0-21.11 , suse/389-ds:latest Container Release : 21.11 Severity : moderate Type : security References : 1208529 1209873 1209878 CVE-2023-0465 CVE-2023-0466 ----------------------------------------------------------------- The container suse/389-ds was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1911-1 Released: Wed Apr 19 13:02:33 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1209873,1209878,CVE-2023-0465,CVE-2023-0466 This update for openssl-1_1 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:1916-1 Released: Wed Apr 19 16:17:58 2023 Summary: Recommended update for sles-release Type: recommended Severity: low References: 1208529 This update for sles-release fixes the following issue: - Filter libhogweed4 and libnettle6 so they dont get orphaned on system upgrades. (bsc#1208529) The following package changes have been done: - libopenssl1_1-1.1.1l-150400.7.34.1 updated - libopenssl1_1-hmac-1.1.1l-150400.7.34.1 updated - sles-release-15.4-150400.58.7.3 updated - openssl-1_1-1.1.1l-150400.7.34.1 updated - container:sles15-image-15.0.0-27.14.53 updated . Enhancements for SUSE Container suse/389-ds tackle several security vulnerabilities, including the enforcement of valid certificate standards.. SUSE ContainerUpdate, 389-ds Security, OpenSSL Security. . LinuxSecurity.com Team
The container suse/sles12sp5 was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sles12sp5 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:1187-1 Container Tags : suse/sles12sp5:6.5.459 , suse/sles12sp5:latest Container Release : 6.5.459 Severity : moderate Type : security References : 1209873 1209878 CVE-2023-0465 CVE-2023-0466 ----------------------------------------------------------------- The container suse/sles12sp5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1914-1 Released: Wed Apr 19 14:24:23 2023 Summary: Security update for openssl-1_0_0 Type: security Severity: moderate References: 1209873,1209878,CVE-2023-0465,CVE-2023-0466 This update for openssl-1_0_0 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873). The following package changes have been done: - libopenssl1_0_0-1.0.2p-3.72.1 updated - openssl-1_0_0-1.0.2p-3.72.1 updated . SUSE Container Patch Notice: suse/sles12sp5 prioritizes certificate-related vulnerabilities in openssl, tackling significant concerns.. SUSE Container, Openssl Security, Patching, Advisory Updates. . LinuxSecurity.com Team
The container suse/sle15 was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:1000-1 Container Tags : bci/bci-base:15.3 , bci/bci-base:15.3.17.20.120 , suse/sle15:15.3 , suse/sle15:15.3.17.20.120 Container Release : 17.20.120 Severity : moderate Type : security References : 1209624 1209873 1209878 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 ----------------------------------------------------------------- The container suse/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:1790-1 Released: Thu Apr 6 15:36:15 2023 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1209624,1209873,1209878,CVE-2023-0464,CVE-2023-0465,CVE-2023-0466 This update for openssl-1_1 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624). - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873). The following package changes have been done: - libopenssl1_1-hmac-1.1.1d-150200.11.62.1 updated - libopenssl1_1-1.1.1d-150200.11.62.1 updated - openssl-1_1-1.1.1d-150200.11.62.1 updated . SUSE Software Security Notice: suse/sle15 security alert with moderate impact on openssl-1_1 addressing various vulnerabilities.. SUSE, OpenSSL Security, Container Update, Certificate Policies, SUSE Advisory. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.