gpp_maybe Security update for openssl-3

SUSE-SLE-Module-Basesystem-15-SP4-2023-312

This update for openssl-3 fixes the following issues: Security fixes: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0401: Fixed NULL pointer dereference during PKCS7 data verification (bsc#1207541). - CVE-2023-0217: Fixed NULL pointer dereference validating DSA public key (bsc#1207540). - CVE-2023-0216: Fixed invalid pointer dereference in d2i_PKCS7 functions (bsc#1207539). - CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536). - CVE-2022-4450: Fixed double free after calling PEM_read_bio_ex() (bsc#1207538). - CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534). - CVE-2022-4203: Fixed read Buffer Overflow with X.509 Name Constraints (bsc#1207535). Non-security fixes: - Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222). - Enable zlib compression support (bsc#1195149). - Add crypto-policies dependency.

• Release Date
  Feb 7 2023
• References
  Bugzilla: 1207541, 1195149, 1206222, 1207539, 1207538, 1207535, 1207534, 1207536, 1207533, 1207540
  CVEs: CVE-2023-0286, CVE-2023-0216, CVE-2022-4450, CVE-2023-0215, CVE-2023-0401, CVE-2023-0217, CVE-2022-4304, CVE-2022-4203
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.4 x86_64

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.1-150400.4.17.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.17.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.17.1 lock rpm lock src

Basesystem Module 15.4 aarch64

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.1-150400.4.17.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.17.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.17.1 lock rpm lock src

Basesystem Module 15.4 ppc64le

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.1-150400.4.17.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.17.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.17.1 lock rpm lock src

Basesystem Module 15.4 s390x

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.0.1-150400.4.17.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.17.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.0.1-150400.4.17.1 lock rpm lock src