452 matches found
OESA-2023-1354 openssl security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary:...
HPESBHF04473 rev.1 - SGI UV300 and HPE MC990 X Remote Management Controller (RMC), Local Multiple Vulnerabilities
Potential Security Impact: Local: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity MC990 X Server RMC firmware 1.2.7 or earlier SGI UV 300 RMC firmware 1.2.7 or earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...
SUSE-SU-2023:2471-1 Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers bsc1211430. - Update further expiring certificates that affect tests bsc1201627...
SUSE-SU-2023:2470-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - Update to version 3.0.8 bsc1207541. - CVE-2022-40735: Fixed remote trigger of expensive server-side DHE modular-exponentiation with long exponents in Diffie-Hellman Key Agreement Protocol bsc1205476. - CVE-2023-1255: Fixed input buffer...
SUSE-SU-2023:2469-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers bsc1211430. - Update further expiring certificates that affect test cases bsc1201627...
Vulnerabilities fixed in Splunk
Splunk has fixed vulnerabilities in Splunk Enterprise, Splunk Universal Forwarders and Splunk Cloud. A malicious party could vulnerabilities to exploit attacks that can lead to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Data manipulation. Remote code...
SUSE-SU-2023:2343-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers bsc1211430...
SUSE-SU-2023:2327-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers bsc1211430...
openssl security and bug fix update
3.0.7-6.0.1 - Replace upstream references Orabug: 34340177 1:3.0.7-6 - Fixes RNG slowdown in FIPS mode Resolves: rhbz2168224 1:3.0.7-5 - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free...
SUSE-SU-2023:1960-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored bsc1209878...
SUSE-SU-2023:1922-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored bsc1209878. - CVE-2023-0466: Certificate policy check were not enabled bsc1209873...
SUSE-SU-2023:1914-1 Security update for openssl-1_0_0
This update for openssl-100 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored bsc1209878. - CVE-2023-0466: Certificate policy check were not enabled bsc1209873...
SUSE-SU-2023:1911-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored bsc1209878. - CVE-2023-0466: Certificate policy check were not enabled bsc1209873...
SUSE-SU-2023:1794-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored bsc1209878. - CVE-2023-0466: Certificate policy check were not enabled bsc1209873...
SUSE-SU-2023:1754-1 Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints bsc1209624...
SUSE-SU-2023:1748-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints bsc1209624...
SUSE-SU-2023:1738-1 Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints bsc1209624...
Low: openssl
Issue Overview: If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing...
openssl security update
1.0.2k-26fips - Change Epoch from 1 to 10 - Fix DH self-test to add shared secret comparison Orabug: 32467026 - Add DH support changes for SP 800-56A rev3 requirements Orabug: 32467059 - Add TLS KDF self-test Orabug: 32467193 - Add EC keys pairwise consistency test Orabug: 32467059 1:1.0.2k-26 -...