gpp_maybe Security update for openssl-1_1

SUSE-SLE-SAP-12-SP4-2023-309

This update for openssl-1_1 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536). - CVE-2022-4450: Fixed double free after calling PEM_read_bio_ex() (bsc#1207538). - CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534).

• Release Date
  Feb 7 2023
• References
  Bugzilla: 1207536, 1207538, 1207534, 1207533
  CVEs: CVE-2022-4304, CVE-2023-0215, CVE-2023-0286, CVE-2022-4450
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libopenssl1_1
  Secure Sockets and Transport Layer Security

  1.1.1d-2.75.1

  lock rpm

  libopenssl1_1-hmac
  HMAC files for FIPS-140-2 integrity checking of the openssl shared libraries

  1.1.1d-2.75.1

  lock rpm

  openssl-1_1
  Secure Sockets and Transport Layer Security

  1.1.1d-2.75.1

  lock rpm

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  libopenssl1_1
  Secure Sockets and Transport Layer Security

  1.1.1d-2.75.1

  lock rpm

  libopenssl1_1-32bit
  Secure Sockets and Transport Layer Security

  1.1.1d-2.75.1

  lock rpm

  libopenssl1_1-hmac
  HMAC files for FIPS-140-2 integrity checking of the openssl shared libraries

  1.1.1d-2.75.1

  lock rpm

  libopenssl1_1-hmac-32bit
  HMAC files for FIPS-140-2 integrity checking of the openssl shared libraries

  1.1.1d-2.75.1

  lock rpm

  openssl-1_1
  Secure Sockets and Transport Layer Security

  1.1.1d-2.75.1

  lock rpm

  lock src