SUSE alert SUSE-SU-2023:1747-1 (openssl-1_1)
| From: | sle-security-updates@lists.suse.com | |
| To: | sle-security-updates@lists.suse.com | |
| Subject: | SUSE-SU-2023:1747-1: moderate: Security update for openssl-1_1 | |
| Date: | Tue, 04 Apr 2023 08:30:04 -0000 | |
| Message-ID: | <168059700470.13137.594996794283492144@smelt2.suse.de> |
# Security update for openssl-1_1 Announcement ID: SUSE-SU-2023:1747-1 Rating: moderate References: * #1209624 Cross-References: * CVE-2023-0464 CVSS scores: * CVE-2023-0464 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-0464 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Software Development Kit 12 SP5 * SUSE OpenStack Cloud 9 * SUSE OpenStack Cloud Crowbar 9 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-1_1 fixes the following issues: * CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624). ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE OpenStack Cloud 9 zypper in -t patch SUSE-OpenStack-Cloud-9-2023-1747=1 * SUSE OpenStack Cloud Crowbar 9 zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2023-1747=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 zypper in -t patch SUSE-SLE-SAP-12-SP4-2023-1747=1 * SUSE Linux Enterprise Software Development Kit 12 SP5 zypper in -t patch SUSE-SLE-SDK-12-SP5-2023-1747=1 * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 zypper in -t patch SUSE-SLE-SERVER-12-SP4-ESPOS-2023-1747=1 * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2023-1747=1 * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-1747=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-1747=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-1747=1 ## Package List: * SUSE OpenStack Cloud 9 (x86_64) * libopenssl1_1-debuginfo-32bit-1.1.1d-2.78.1 * openssl-1_1-debuginfo-1.1.1d-2.78.1 * libopenssl1_1-debuginfo-1.1.1d-2.78.1 * openssl-1_1-debugsource-1.1.1d-2.78.1 * openssl-1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-32bit-1.1.1d-2.78.1 * libopenssl1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-1.1.1d-2.78.1 * libopenssl1_1-32bit-1.1.1d-2.78.1 * SUSE OpenStack Cloud Crowbar 9 (x86_64) * libopenssl1_1-debuginfo-32bit-1.1.1d-2.78.1 * openssl-1_1-debuginfo-1.1.1d-2.78.1 * libopenssl1_1-debuginfo-1.1.1d-2.78.1 * openssl-1_1-debugsource-1.1.1d-2.78.1 * openssl-1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-32bit-1.1.1d-2.78.1 * libopenssl1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-1.1.1d-2.78.1 * libopenssl1_1-32bit-1.1.1d-2.78.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 (ppc64le x86_64) * openssl-1_1-debuginfo-1.1.1d-2.78.1 * libopenssl1_1-debuginfo-1.1.1d-2.78.1 * openssl-1_1-debugsource-1.1.1d-2.78.1 * openssl-1_1-1.1.1d-2.78.1 * libopenssl1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-1.1.1d-2.78.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 (x86_64) * libopenssl1_1-debuginfo-32bit-1.1.1d-2.78.1 * libopenssl1_1-hmac-32bit-1.1.1d-2.78.1 * libopenssl1_1-32bit-1.1.1d-2.78.1 * SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debuginfo-1.1.1d-2.78.1 * openssl-1_1-debugsource-1.1.1d-2.78.1 * libopenssl-1_1-devel-1.1.1d-2.78.1 * SUSE Linux Enterprise Software Development Kit 12 SP5 (s390x x86_64) * libopenssl-1_1-devel-32bit-1.1.1d-2.78.1 * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (aarch64 x86_64) * openssl-1_1-debuginfo-1.1.1d-2.78.1 * libopenssl1_1-debuginfo-1.1.1d-2.78.1 * openssl-1_1-debugsource-1.1.1d-2.78.1 * openssl-1_1-1.1.1d-2.78.1 * libopenssl1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-1.1.1d-2.78.1 * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (x86_64) * libopenssl1_1-debuginfo-32bit-1.1.1d-2.78.1 * libopenssl1_1-hmac-32bit-1.1.1d-2.78.1 * libopenssl1_1-32bit-1.1.1d-2.78.1 * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debuginfo-1.1.1d-2.78.1 * libopenssl1_1-debuginfo-1.1.1d-2.78.1 * openssl-1_1-debugsource-1.1.1d-2.78.1 * openssl-1_1-1.1.1d-2.78.1 * libopenssl1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-1.1.1d-2.78.1 * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (s390x x86_64) * libopenssl1_1-debuginfo-32bit-1.1.1d-2.78.1 * libopenssl1_1-hmac-32bit-1.1.1d-2.78.1 * libopenssl1_1-32bit-1.1.1d-2.78.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64) * openssl-1_1-debuginfo-1.1.1d-2.78.1 * libopenssl1_1-debuginfo-1.1.1d-2.78.1 * openssl-1_1-debugsource-1.1.1d-2.78.1 * openssl-1_1-1.1.1d-2.78.1 * libopenssl1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-1.1.1d-2.78.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64) * libopenssl1_1-debuginfo-32bit-1.1.1d-2.78.1 * libopenssl1_1-hmac-32bit-1.1.1d-2.78.1 * libopenssl1_1-32bit-1.1.1d-2.78.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) * openssl-1_1-debuginfo-1.1.1d-2.78.1 * libopenssl1_1-debuginfo-1.1.1d-2.78.1 * openssl-1_1-debugsource-1.1.1d-2.78.1 * openssl-1_1-1.1.1d-2.78.1 * libopenssl1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-1.1.1d-2.78.1 * SUSE Linux Enterprise Server 12 SP5 (s390x x86_64) * libopenssl1_1-debuginfo-32bit-1.1.1d-2.78.1 * libopenssl1_1-hmac-32bit-1.1.1d-2.78.1 * libopenssl1_1-32bit-1.1.1d-2.78.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64) * openssl-1_1-debuginfo-1.1.1d-2.78.1 * libopenssl1_1-debuginfo-1.1.1d-2.78.1 * openssl-1_1-debugsource-1.1.1d-2.78.1 * openssl-1_1-1.1.1d-2.78.1 * libopenssl1_1-1.1.1d-2.78.1 * libopenssl1_1-hmac-1.1.1d-2.78.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64) * libopenssl1_1-debuginfo-32bit-1.1.1d-2.78.1 * libopenssl1_1-hmac-32bit-1.1.1d-2.78.1 * libopenssl1_1-32bit-1.1.1d-2.78.1 ## References: * https://www.suse.com/security/cve/CVE-2023-0464.html * https://bugzilla.suse.com/show_bug.cgi?id=1209624