shield Security update for openssl-1_1

SUSE-SLE-SAP-12-SP4-2023-2623

This update for openssl-1_1 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534). - Update further expiring certificates that affect tests [bsc#1201627]

• Release Date
  Jun 23 2023
• References
  Bugzilla: 1201627, 1207534
  CVEs: CVE-2022-4304
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libopenssl1_1
  Secure Sockets and Transport Layer Security

  1.1.1d-2.89.1

  lock rpm

  libopenssl1_1-hmac
  HMAC files for FIPS-140-2 integrity checking of the openssl shared libraries

  1.1.1d-2.89.1

  lock rpm

  openssl-1_1
  Secure Sockets and Transport Layer Security

  1.1.1d-2.89.1

  lock rpm

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  libopenssl1_1
  Secure Sockets and Transport Layer Security

  1.1.1d-2.89.1

  lock rpm

  libopenssl1_1-32bit
  Secure Sockets and Transport Layer Security

  1.1.1d-2.89.1

  lock rpm

  libopenssl1_1-hmac
  HMAC files for FIPS-140-2 integrity checking of the openssl shared libraries

  1.1.1d-2.89.1

  lock rpm

  libopenssl1_1-hmac-32bit
  HMAC files for FIPS-140-2 integrity checking of the openssl shared libraries

  1.1.1d-2.89.1

  lock rpm

  openssl-1_1
  Secure Sockets and Transport Layer Security

  1.1.1d-2.89.1

  lock rpm

  lock src