gpp_maybe Security update for openssl-3
SUSE-SLE-Module-Basesystem-15-SP7-2025-2042


This update for openssl-3 fixes the following issues: - CVE-2025-27587: timing side-channel vulnerability in the P-384 implementation when used with ECDSA (bsc#1243459). - CVE-2024-12797: Fixed that RFC7250 handshakes with unauthenticated servers don't abort as expected. (bsc#1236599) - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136)


cloud_download Downloads

Basesystem Module 15.7 ppc64le
  • Packages
    libopenssl-3-devel
    Development files for OpenSSL
    3.2.3-150700.5.5.1 lock rpm
    libopenssl-3-fips-provider
    OpenSSL FIPS provider
    3.2.3-150700.5.5.1 lock rpm
    libopenssl3
    Secure Sockets and Transport Layer Security
    3.2.3-150700.5.5.1 lock rpm
    openssl-3
    Secure Sockets and Transport Layer Security
    3.2.3-150700.5.5.1 lock rpm lock src
Basesystem Module 15.7 aarch64
  • Packages
    libopenssl-3-devel
    Development files for OpenSSL
    3.2.3-150700.5.5.1 lock rpm
    libopenssl-3-fips-provider
    OpenSSL FIPS provider
    3.2.3-150700.5.5.1 lock rpm
    libopenssl3
    Secure Sockets and Transport Layer Security
    3.2.3-150700.5.5.1 lock rpm
    openssl-3
    Secure Sockets and Transport Layer Security
    3.2.3-150700.5.5.1 lock rpm lock src
Basesystem Module 15.7 s390x
  • Packages
    libopenssl-3-devel
    Development files for OpenSSL
    3.2.3-150700.5.5.1 lock rpm
    libopenssl-3-fips-provider
    OpenSSL FIPS provider
    3.2.3-150700.5.5.1 lock rpm
    libopenssl3
    Secure Sockets and Transport Layer Security
    3.2.3-150700.5.5.1 lock rpm
    openssl-3
    Secure Sockets and Transport Layer Security
    3.2.3-150700.5.5.1 lock rpm lock src
Basesystem Module 15.7 x86_64