gpp_maybe Security update for openssl-1_0_0

SUSE-SLE-SDK-12-SP5-2023-306

This update for openssl-1_0_0 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536). - CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534). - testsuite: Update further expiring certificates that affect tests [bsc#1201627]

• Release Date
  Feb 7 2023
• References
  Bugzilla: 1207536, 1207533, 1201627, 1207534
  CVEs: CVE-2022-4304, CVE-2023-0215, CVE-2023-0286
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.5 s390x

• Packages
  libopenssl-1_0_0-devel
  Development files for OpenSSL

  1.0.2p-3.64.1

  lock rpm

  libopenssl-1_0_0-devel-32bit
  Development files for OpenSSL

  1.0.2p-3.64.1

  lock rpm

  openssl-1_0_0
  Secure Sockets and Transport Layer Security

  1.0.2p-3.64.1

  lock src

SUSE Linux Enterprise Software Development Kit 12.5 aarch64

• Packages
  libopenssl-1_0_0-devel
  Development files for OpenSSL

  1.0.2p-3.64.1

  lock rpm

  openssl-1_0_0
  Secure Sockets and Transport Layer Security

  1.0.2p-3.64.1

  lock src

SUSE Linux Enterprise Software Development Kit 12.5 ppc64le

• Packages
  libopenssl-1_0_0-devel
  Development files for OpenSSL

  1.0.2p-3.64.1

  lock rpm

  openssl-1_0_0
  Secure Sockets and Transport Layer Security

  1.0.2p-3.64.1

  lock src

SUSE Linux Enterprise Software Development Kit 12.5 x86_64

• Packages
  libopenssl-1_0_0-devel
  Development files for OpenSSL

  1.0.2p-3.64.1

  lock rpm

  libopenssl-1_0_0-devel-32bit
  Development files for OpenSSL

  1.0.2p-3.64.1

  lock rpm

  openssl-1_0_0
  Secure Sockets and Transport Layer Security

  1.0.2p-3.64.1

  lock src