SUSE-SU-2023:2470-1 -- SLES openssl-3, libopenssl-3-devel, libopenssl3| ID: oval:org.secpod.oval:def:89048942 | Date: (C)2023-07-18 (M)2024-04-29 |
| Class: PATCH | Family: unix |
This update for openssl-3 fixes the following issues: * Update to version 3.0.8 . * CVE-2022-40735: Fixed remote trigger of expensive server-side DHE modular- exponentiation with long exponents in Diffie-Hellman Key Agreement Protocol . * CVE-2023-1255: Fixed input buffer over-read in AES-XTS implementation on 64 bit ARM . * CVE-2023-2650: Fixed possible DoS translating ASN.1 object identifiers .
| Platform: |
| SUSE Linux Enterprise Desktop 15 SP4 |
| SUSE Linux Enterprise Server 15 SP4 |
| Product: |
| openssl-3 |
| libopenssl-3-devel |
| libopenssl3 |
