< back to search

shield Security update for openssl-3

SUSE-SLE-Module-Basesystem-15-SP4-2023-3013

This update for openssl-3 fixes the following issues: - CVE-2023-2975: Fixed AES-SIV implementation ignores empty associated data entries (bsc#1213383). - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).

Release Date

Jul 28 2023
References

Bugzilla: 1213383, 1213487
CVEs: CVE-2023-2975, CVE-2023-3446
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.4 aarch64

Packages

libopenssl-3-devel
Development files for OpenSSL

3.0.8-150400.4.31.2 lock rpm

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.31.2 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.31.2 lock rpm lock src

Basesystem Module 15.4 ppc64le

Packages

libopenssl-3-devel
Development files for OpenSSL

3.0.8-150400.4.31.2 lock rpm

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.31.2 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.31.2 lock rpm lock src

Basesystem Module 15.4 s390x

Packages

libopenssl-3-devel
Development files for OpenSSL

3.0.8-150400.4.31.2 lock rpm

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.31.2 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.31.2 lock rpm lock src

Basesystem Module 15.4 x86_64

Packages

libopenssl-3-devel
Development files for OpenSSL

3.0.8-150400.4.31.2 lock rpm

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.31.2 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.31.2 lock rpm lock src