SUSE-SU-2023:1908-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2023-0465: Fixed ignored invalid certificate policies in leaf certificates bsc1209878. - CVE-2023-0466: Fixed disabled certificate policy check bsc1209873...

SUSE-SU-2023:1907-1 Security update for openssl

This update for openssl fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored bsc1209878. - CVE-2023-0466: Certificate policy check were not enabled bsc1209873...

Security Bulletin: OpenSSL publicly disclosed vulnerability affects IBM® MobileFirst Platform

Summary IBM MobileFirst Platform Foundation has addressed the following vulnerabilities by updating the version of OpenSSL Vulnerability Details CVEID:CVE-2022-4304 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA...

Oracle MySQL Workbench <= 8.0.32 (April 2023)

The version of Oracle MySQL Workbench installed on the remote Windows host is prior to 8.0.32. It is, therefore, affected by a Use After Free vulnerability in the MySQL Workbench product of Oracle MySQL component: Workbench: OpenSSL. Supported versions that are affected are 8.0.32 and prior. Easi...

Oracle MySQL ODBC and C++ Connectors (Apr 2023 CPU)

The versions of MySQL ODBC or C++ Connectors installed on the remote host are affected by a vulnerability in the OpenSSL component as referenced in the April 2023 CPU advisory. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows unauthenticated...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to denial of service and remote attack due to OpenSSL and cURL libcurl. (CVE-2022-4304, CVE-2023-0215, CVE-2023-0286 & CVE-2022-42915).

Summary ODBC Drivers in IBM App Connect Enterprise and IBM Integration Bus are vulnerable to denial of service and remote attack due to OpenSSL & cURL libcurl. CVE-2022-4304, CVE-2023-0215, CVE-2023-0286 & CVE-2022-42915. The resolving fix includes OpenSSL 1.1.1t and cURL libcurl =7.86.0...

SUSE-SU-2023:1898-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored bsc1209878. - CVE-2023-0466: Certificate policy check were not enabled bsc1209873. - Update further expiring certificates that affect tests bsc1210060...

ROS-20230418-05

A vulnerability in the OpenSSL cryptographic library is related to a boundary error in the PEMreadbioex function. Exploitation of the vulnerability could allow an attacker acting remotely to pass a specially crafted PEM file to an application, cause a memory re-release error, and perform a typing...

Security Bulletin: IBM Cloud Pak for Network Automation 2.4.5 addresses multiple security vulnerabilities

Summary IBM Cloud Pak for Network Automation 2.4.5 addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2022-41903 DESCRIPTION: Git could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow when processin...

CVE-2021-46880

x509/x509verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded...

Security Bulletin: Several System x and Flex Systems products are affected by vulnerabilities in OpenSSL (CVE-2013-6449, CVE-2013-4353 and CVE-2013-6450)

Summary Security vulnerabilities discovered in OpenSSL have been fixed in recent releases of several IBM System x and Flex Systems products. You may have already applied the updates containing these fixes. Vulnerability Details Abstract Security vulnerabilities discovered in OpenSSL have been fix...

Security Bulletin: Vulnerability in OpenSSL affects IBM Advanced Management Module (AMM) for BladeCenter systems

Summary IBM Advanced Management Module AMM for BladeCenter systems has addressed the following vulnerability in OpenSSL. Vulnerability Details Summary IBM Advanced Management Module AMM for BladeCenter systems has addressed the following vulnerability in OpenSSL. Vulnerability Details CVE-ID:...

Security Bulletin: Multiple vulnerabilities in OpenSSH, GNU C Library (glibc), and OpenSSL, including Logjam, affect Integrated Management Module II (IMM2)

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. This includes Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. OpenSSL is used by Integrated Management Module II IMM2. Vulnerability Details Summary OpenSSL...

Security Bulletin: IBM BladeCenter Advanced Management Module is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, and CVE-2014-3470.

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details Abstract Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Content Vulnerability...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Integrated Management Module (IMM) for System x & BladeCenter (CVE-2016-2177, CVE-2016-2178)

Summary IBM Integrated Management Module IMM for System x and BladeCenter has addressed the following vulnerabilities in OpenSSL. Vulnerability Details Summary IBM Integrated Management Module IMM for System x & BladeCenter has addressed the following vulnerabilities in OpenSSL. Vulnerability...

Security Bulletin: Vulnerability in OpenSSL affects IBM Advanced Management Module (AMM) for BladeCenter systems

Summary IBM Advanced Management Module AMM for BladeCenter systems has addressed the following vulnerability in OpenSSL. Vulnerability Details Summary IBM Advanced Management Module AMM for BladeCenter systems has addressed the following vulnerability in OpenSSL. Vulnerability Details CVE-ID:...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Integrated Management Module (IMM) for System x & BladeCenter

Summary IBM Integrated Management Module IMM for System x & BladeCenter have addressed the following vulnerabilities in OpenSSL. Vulnerability Details Summary IBM Integrated Management Module IMM for System x & BladeCenter have addressed the following vulnerabilities in OpenSSL. Vulnerability...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM BladeCenter Advanced Management Module (AMM)

Summary OpenSSL vulnerabilities affect IBM BladeCenter Advanced Management Module AMM. Vulnerability Details Summary OpenSSL vulnerabilities affect IBM BladeCenter Advanced Management Module AMM. Vulnerability Details CVE-ID: CVE-2015-3194 Description: OpenSSL is vulnerable to a denial of service...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Integrated Management Module (IMM) for System x & BladeCenter

Summary IBM Integrated Management Module IMM for System x & BladeCenter have addressed the following vulnerabilities in OpenSSL. Vulnerability Details Summary IBM Integrated Management Module IMM for System x & BladeCenter have addressed the following vulnerabilities in OpenSSL. Vulnerability...

Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Management Module (IMM) (CVE-2015-3195)

Summary IBM Integrated Management Module IMM has addressed the following vulnerability in OpenSSL. Vulnerability Details Summary IBM Integrated Management Module IMM has addressed the following vulnerability in OpenSSL. Vulnerability Details CVE-ID: CVE-2015-3195 Description: OpenSSL could allow ...