Lucene search

K
slackwareSlackware Linux ProjectSSA-2023-150-01
HistoryMay 31, 2023 - 1:33 a.m.

[slackware-security] openssl

2023-05-3101:33:48
Slackware Linux Project
www.slackware.com
14

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

53.0%

New openssl packages are available for Slackware 15.0 and -current to
fix a security issue.

Here are the details from the Slackware 15.0 ChangeLog:

patches/packages/openssl-1.1.1u-i586-1_slack15.0.txz: Upgraded.
This update fixes a security issue:
Possible DoS translating ASN.1 object identifiers.
For more information, see:
https://www.openssl.org/news/secadv/20230530.txt
https://vulners.com/cve/CVE-2023-2650
(* Security fix *)
patches/packages/openssl-solibs-1.1.1u-i586-1_slack15.0.txz: Upgraded.

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/openssl-1.1.1u-i586-1_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/openssl-solibs-1.1.1u-i586-1_slack15.0.txz

Updated packages for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/openssl-1.1.1u-x86_64-1_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/openssl-solibs-1.1.1u-x86_64-1_slack15.0.txz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/openssl-solibs-3.1.1-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/openssl-3.1.1-i586-1.txz

Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/openssl-solibs-3.1.1-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/openssl-3.1.1-x86_64-1.txz

MD5 signatures:

Slackware 15.0 packages:
553d0c9036f769fb5a05bebc107dd08b openssl-1.1.1u-i586-1_slack15.0.txz
e4489372d647a4d1da47dd60b357621e openssl-solibs-1.1.1u-i586-1_slack15.0.txz

Slackware x86_64 15.0 packages:
0af674e0cf9e249962bc55de34e9717a openssl-1.1.1u-x86_64-1_slack15.0.txz
6de533d02df399718f1d26402a6a9977 openssl-solibs-1.1.1u-x86_64-1_slack15.0.txz

Slackware -current packages:
88411c4cc6b3997a864f39af659ca05e a/openssl-solibs-3.1.1-i586-1.txz
340159c4418151dd7932e6fb60e499bd n/openssl-3.1.1-i586-1.txz

Slackware x86_64 -current packages:
18215b6a0b2a3153e29e6cc31f49023e a/openssl-solibs-3.1.1-x86_64-1.txz
25d70d5769b9426976ff5417207de313 n/openssl-3.1.1-x86_64-1.txz

Installation instructions:

Upgrade the packages as root:
> upgradepkg openssl-1.1.1u-i586-1_slack15.0.txz openssl-solibs-1.1.1u-i586-1_slack15.0.txz

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

53.0%