169 matches found
SUSE-SU-2023:29171-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers bsc1211430. - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a...
SUSE-SU-2023:1908-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2023-0465: Fixed ignored invalid certificate policies in leaf certificates bsc1209878. - CVE-2023-0466: Fixed disabled certificate policy check bsc1209873...
SUSE-SU-2023:1907-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored bsc1209878. - CVE-2023-0466: Certificate policy check were not enabled bsc1209873...
MGASA-2023-0130 Updated openssl packages fix security vulnerability
A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate...
SUSE-SU-2023:1764-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints bsc1209624...
SUSE-SU-2023:1703-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: Security fixes: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints bsc1209624. Other fixes: - Fix DH key generation in FIPS mode, add support for constant BN for DH parameters bsc1202062...
SUSE-SU-2023:0584-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-4304: Fixed timing Oracle in RSA Decryption bsc1207534...
OpenSSL Fixes Multiple New Security Flaws with Latest Update
The OpenSSL Project has released fixes to address several security flaws, including a high-severity bug in the open source encryption toolkit that could potentially expose users to malicious attacks. Tracked as CVE-2023-0286, the issue relates to a case of type confusion that may permit an...
SUSE-SU-2023:0308-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERALNAMEcmp for x400Address bsc1207533. - CVE-2023-0215: Fixed use-after-free following BIOnewNDEF bsc1207536. - CVE-2022-4304: Fixed timing Oracle in RSA Decryption bsc1207534...
SUSE-SU-2023:0306-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERALNAMEcmp for x400Address bsc1207533. - CVE-2023-0215: Fixed use-after-free following BIOnewNDEF bsc1207536. - CVE-2022-4304: Fixed timing Oracle in RSA Decryption bsc1207534....
SUSE-SU-2023:0305-2 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERALNAMEcmp for x400Address bsc1207533. - CVE-2023-0215: Fixed use-after-free following BIOnewNDEF bsc1207536. - CVE-2022-4304: Fixed timing Oracle in RSA Decryption bsc1207534...
SUSE-SU-2022:4586-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2022-3996: Fixed X.509 Policy Constraints Double Locking bsc1206374...
MGASA-2022-0255 Updated openssl packages fix security vulnerability
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption...
SUSE-SU-2022:2309-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550 - CVE-2022-2097: Fixed partial missing encryption in AES OCB mode. bsc1201099...
SUSE-SU-2022:2251-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2022-1292: Fixed command injection in crehash bsc1199166. - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...
SUSE-SU-2022:2197-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2022-1292: Fixed command injection in crehash bsc1199166. - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...
SUSE-SU-2022:2179-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...
SUSE-SU-2022:2075-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2022-1292: Fixed command injection in crehash bsc1199166...
