< back to search

shield Security update for openssl-3

SUSE-SLE-Micro-5.3-2024-518

This update for openssl-3 fixes the following issues: - CVE-2023-6129: Fixed vector register clobbering on PowerPC. (bsc#1218690) - CVE-2023-6237: Fixed excessive time spent checking invalid RSA public keys. (bsc#1218810) - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

Release Date

Feb 15 2024
References

Bugzilla: 1218810, 1218690, 1219243
CVEs: CVE-2023-6129, CVE-2023-6237, CVE-2024-0727
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.3 aarch64

Packages

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.49.1 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.49.1 lock src

SUSE Linux Enterprise Micro 5.3 x86_64

Packages

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.49.1 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.49.1 lock src

SUSE Linux Enterprise Micro 5.3 s390x

Packages

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.49.1 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.49.1 lock src