< back to search

gpp_maybe Security update for openssl-3

SUSE-SLE-Micro-5.4-2024-3871

This update for openssl-3 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262) - CVE-2024-41996: Avoid expensive public key validation for known safe-prime groups (DHEATATTACK) (bsc#1230698)

Release Date

Nov 1 2024
References

Bugzilla: 1230698, 1220262
CVEs: CVE-2023-50782, CVE-2024-41996
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.4 aarch64

Packages

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.69.1 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.69.1 lock src

SUSE Linux Enterprise Micro 5.4 s390x

Packages

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.69.1 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.69.1 lock src

SUSE Linux Enterprise Micro 5.4 x86_64

Packages

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.69.1 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.69.1 lock src