gpp_maybe Security update for openssl-3

SUSE-SLE-Module-Basesystem-15-SP4-2022-2306

This update for openssl-3 fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550) - CVE-2022-1292: Properly sanitise shell metacharacters in c_rehash script. (bsc#1199166) - CVE-2022-1343: Fixed incorrect signature verification in OCSP_basic_verify (bsc#1199167). - CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099). - CVE-2022-1434: Fixed incorrect MAC key used in the RC4-MD5 ciphersuite (bsc#1199168). - CVE-2022-1473: Fixed resource leakage when decoding certificates and keys (bsc#1199169).

• Release Date
  Jul 6 2022
• References
  Bugzilla: 1199166, 1199167, 1199169, 1201099, 1199168, 1185637, 1200550
  CVEs: CVE-2022-2068, CVE-2022-1292, CVE-2022-2097, CVE-2022-1434, CVE-2022-1343, CVE-2022-1473
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.4 x86_64

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.1-150400.4.7.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.7.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.7.1 lock rpm lock src

Basesystem Module 15.4 aarch64

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.1-150400.4.7.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.7.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.7.1 lock rpm lock src

Basesystem Module 15.4 ppc64le

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.1-150400.4.7.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.7.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.7.1 lock rpm lock src

Basesystem Module 15.4 s390x

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.1-150400.4.7.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.7.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.7.1 lock rpm lock src