shield Security update for compat-openssl098

SUSE-SLE-Module-Legacy-12-2023-3096

This update for compat-openssl098 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534). - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487). - Update further expiring certificates that affect tests (bsc#1201627).

• Release Date
  Aug 1 2023
• References
  Bugzilla: 1201627, 1207534, 1213487
  CVEs: CVE-2022-4304, CVE-2023-3446
• Type
  security
• Severity
  moderate

cloud_download Downloads

Legacy Module 12 s390x

• Packages
  compat-openssl098
  Secure Sockets and Transport Layer Security

  0.9.8j-106.58.1 lock src

  libopenssl0_9_8
  Secure Sockets and Transport Layer Security

  0.9.8j-106.58.1 lock rpm

  libopenssl0_9_8-32bit
  Secure Sockets and Transport Layer Security

  0.9.8j-106.58.1 lock rpm

Legacy Module 12 x86_64

• Packages
  compat-openssl098
  Secure Sockets and Transport Layer Security

  0.9.8j-106.58.1 lock src

  libopenssl0_9_8
  Secure Sockets and Transport Layer Security

  0.9.8j-106.58.1 lock rpm

  libopenssl0_9_8-32bit
  Secure Sockets and Transport Layer Security

  0.9.8j-106.58.1 lock rpm