1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2023:0307-1

[SUSE-SU-2023:0307-1] Security update for openssl1

Severity Important
Affected Packages 5
CVEs 3
Info Packages References Vulnerabilities

Security update for openssl1

This update for openssl1 fixes the following issues:

  • CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533).
  • CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536).
  • CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534).
Package Affected Version
pkg:rpm/suse/openssl1?arch=x86_64&distro=sles-11&sp=4 < 1.0.1g-0.58.56.1
pkg:rpm/suse/openssl1-doc?arch=x86_64&distro=sles-11&sp=4 < 1.0.1g-0.58.56.1
pkg:rpm/suse/libopenssl1_0_0?arch=x86_64&distro=sles-11&sp=4 < 1.0.1g-0.58.56.1
pkg:rpm/suse/libopenssl1_0_0-32bit?arch=x86_64&distro=sles-11&sp=4 < 1.0.1g-0.58.56.1
pkg:rpm/suse/libopenssl1-devel?arch=x86_64&distro=sles-11&sp=4 < 1.0.1g-0.58.56.1
ID
SUSE-SU-2023:0307-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2023/suse-su-20230307-1/
Published
2023-02-07T16:33:26
(19 months ago)
Modified
2023-02-07T16:33:26
(19 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/openssl1?arch=x86_64&distro=sles-11&sp=4 suse openssl1 < 1.0.1g-0.58.56.1 sles-11 x86_64
Affected pkg:rpm/suse/openssl1-doc?arch=x86_64&distro=sles-11&sp=4 suse openssl1-doc < 1.0.1g-0.58.56.1 sles-11 x86_64
Affected pkg:rpm/suse/libopenssl1_0_0?arch=x86_64&distro=sles-11&sp=4 suse libopenssl1_0_0 < 1.0.1g-0.58.56.1 sles-11 x86_64
Affected pkg:rpm/suse/libopenssl1_0_0-32bit?arch=x86_64&distro=sles-11&sp=4 suse libopenssl1_0_0-32bit < 1.0.1g-0.58.56.1 sles-11 x86_64
Affected pkg:rpm/suse/libopenssl1-devel?arch=x86_64&distro=sles-11&sp=4 suse libopenssl1-devel < 1.0.1g-0.58.56.1 sles-11 x86_64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date