SUSE-SU-2023:2624-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:2624-1

UNKNOWN

Security update for openssl-1_0_0

Published Jun 23, 2023

Modified 2 years ago

Fix available

Details

This update for openssl-1_0_0 fixes the following issues:

CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534).

Affected Packages

libopenssl-1_0_0-devel

SUSE Linux Enterprise Server 12 SP4-ESPOSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

1.0.2p-3.78.1

libopenssl1_0_0

SUSE Linux Enterprise Server 12 SP4-ESPOSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

1.0.2p-3.78.1

libopenssl1_0_0-32bit

SUSE Linux Enterprise Server 12 SP4-ESPOSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

1.0.2p-3.78.1

libopenssl1_0_0-hmac

SUSE Linux Enterprise Server 12 SP4-ESPOSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

1.0.2p-3.78.1

libopenssl1_0_0-hmac-32bit

SUSE Linux Enterprise Server 12 SP4-ESPOSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

1.0.2p-3.78.1

openssl-1_0_0

SUSE Linux Enterprise Server 12 SP4-ESPOSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

1.0.2p-3.78.1

openssl-1_0_0-doc

SUSE Linux Enterprise Server 12 SP4-ESPOSSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

1.0.2p-3.78.1

libopenssl-1_0_0-devel-32bit

SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

1.0.2p-3.78.1

References

https://bugzilla.suse.com/1207534

https://www.suse.com/security/cve/CVE-2022-4304

https://www.suse.com/support/update/announcement/2023/suse-su-20232624-1/

Upstream

Related

Ecosystems(8)

SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5

Timeline

PublishedJun 23, 2023

ModifiedJun 23, 2023