SUSE alert SUSE-SU-2026:3444-1 (openssl-3)
| From: | SLE-SECURITY-UPDATES <null@suse.de> | |
| To: | sle-security-updates@lists.suse.com | |
| Subject: | SUSE-SU-2026:3444-1: moderate: Security update for openssl-3 | |
| Date: | Mon, 03 Aug 2026 08:30:35 -0000 | |
| Message-ID: | <178574583513.2189.2977488042315453383@b03e17030db4> |
# Security update for openssl-3 Announcement ID: SUSE-SU-2026:3444-1 Release Date: 2026-07-31T20:04:38Z Rating: moderate References: * bsc#1271712 Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one security fix can now be installed. ## Description: This update for openssl-3 fixes the following issues: * HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker- controlled memory allocations (bsc#1271712). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3444=1 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libopenssl-3-fips-provider-3.2.3-150700.5.40.1 * libopenssl3-3.2.3-150700.5.40.1 * libopenssl3-debuginfo-3.2.3-150700.5.40.1 * libopenssl-3-fips-provider-debuginfo-3.2.3-150700.5.40.1 * openssl-3-debugsource-3.2.3-150700.5.40.1 * openssl-3-3.2.3-150700.5.40.1 * libopenssl-3-devel-3.2.3-150700.5.40.1 * openssl-3-debuginfo-3.2.3-150700.5.40.1 * Basesystem Module 15-SP7 (x86_64) * libopenssl3-32bit-debuginfo-3.2.3-150700.5.40.1 * libopenssl-3-fips-provider-32bit-3.2.3-150700.5.40.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.2.3-150700.5.40.1 * libopenssl3-32bit-3.2.3-150700.5.40.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1271712
Attachment: None (type=text/html)
(HTML attachment elided)
