shield Security update for openssl-3

SUSE-SLE-Module-Basesystem-15-SP4-2023-2470

This update for openssl-3 fixes the following issues: - Update to version 3.0.8 (bsc#1207541). - CVE-2022-40735: Fixed remote trigger of expensive server-side DHE modular-exponentiation with long exponents in Diffie-Hellman Key Agreement Protocol (bsc#1205476). - CVE-2023-1255: Fixed input buffer over-read in AES-XTS implementation on 64 bit ARM (bsc#1210714). - CVE-2023-2650: Fixed possible DoS translating ASN.1 object identifiers (bsc#1211430).

• Release Date
  Jun 8 2023
• References
  Bugzilla: 1205476, 1210714, 1211430
  CVEs: CVE-2023-1255, CVE-2023-2650, CVE-2022-40735
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.4 ppc64le

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.8-150400.4.26.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.8-150400.4.26.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.8-150400.4.26.1 lock rpm lock src

Basesystem Module 15.4 x86_64

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.8-150400.4.26.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.8-150400.4.26.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.8-150400.4.26.1 lock rpm lock src

Basesystem Module 15.4 aarch64

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.8-150400.4.26.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.8-150400.4.26.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.8-150400.4.26.1 lock rpm lock src

Basesystem Module 15.4 s390x

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.8-150400.4.26.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.8-150400.4.26.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.8-150400.4.26.1 lock rpm lock src