Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:21213-1

UNKNOWN

Security update for openssl-3

Published Dec 15, 2025

Modified 1 months ago

Fix available

Details

This update for openssl-3 fixes the following issues:

CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232)
CVE-2025-9231: Fixedk timing side-channel in SM2 algorithm on 64 bit ARM (bsc#1250233)
CVE-2025-9232: Fixed out-of-bounds read in HTTP client no_proxy handling (bsc#1250234)

Affected Packages

SUSE:Linux Enterprise Server 16.0libopenssl-3-devel

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server 16.0libopenssl-3-fips-provider

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server 16.0libopenssl-3-fips-provider-x86-64-v3

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server 16.0libopenssl3

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server 16.0libopenssl3-x86-64-v3

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server 16.0openssl-3

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server 16.0openssl-3-doc

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server for SAP applications 16.0libopenssl-3-devel

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server for SAP applications 16.0libopenssl-3-fips-provider

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server for SAP applications 16.0libopenssl-3-fips-provider-x86-64-v3

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server for SAP applications 16.0libopenssl3

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server for SAP applications 16.0libopenssl3-x86-64-v3

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server for SAP applications 16.0openssl-3

Fixed in:

3.5.0-160000.4.1

SUSE:Linux Enterprise Server for SAP applications 16.0openssl-3-doc

Fixed in:

3.5.0-160000.4.1

Timeline

PublishedDec 15, 2025

ModifiedDec 15, 2025

SUSE-SU-2025:21213-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:21213-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline