Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:2648-1

Опубликовано: 27 июн. 2023
Источник: suse-cvrf

Описание

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

  • CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534).

  • Update further expiring certificates that affect the testsuite (bsc#1201627).

Список пакетов

Container bci/bci-init:15.4
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container bci/node:16
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container bci/python:3
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container rancher/elemental-builder-image/5.3:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container rancher/elemental-operator/5.3:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container rancher/elemental-operator:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container rancher/elemental-teal-iso/5.3:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container rancher/elemental-teal-iso/5.4:latest
libopenssl1_1-1.1.1l-150400.7.42.1
Container rancher/elemental-teal-rt/5.3:latest
libopenssl1_1-1.1.1l-150400.7.42.1
Container rancher/elemental-teal-rt/5.4:latest
libopenssl1_1-1.1.1l-150400.7.42.1
Container rancher/elemental-teal/5.3:latest
libopenssl1_1-1.1.1l-150400.7.42.1
Container rancher/elemental-teal/5.4:latest
libopenssl1_1-1.1.1l-150400.7.42.1
Container rancher/seedimage-builder/5.3:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container rancher/seedimage-builder:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container suse/ltss/sle15.4/bci-base:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container suse/manager/4.3/proxy-httpd:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container suse/manager/4.3/proxy-salt-broker:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container suse/manager/4.3/proxy-squid:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container suse/manager/4.3/proxy-ssh:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container suse/manager/4.3/proxy-tftpd:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container suse/pcp:5
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container suse/postgres:14
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container suse/sle-micro-rancher/5.3:latest
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container suse/sle-micro-rancher/5.4:latest
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container suse/sle-micro/5.3/toolbox:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container suse/sle-micro/5.4/toolbox:latest
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Container suse/sle15:15.4
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-CHOST-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-CHOST-BYOS-Aliyun
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-CHOST-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-CHOST-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-CHOST-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-CHOST-BYOS-SAP-CCloud
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-HPC-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-HPC-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-HPC-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-HPC-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-HPC-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-HPC-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Hardened-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Hardened-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Hardened-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Hardened-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Server-4-3
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Server-4-3-Azure-llc
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Server-4-3-Azure-ltd
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Server-4-3-EC2-llc
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Manager-Server-4-3-EC2-ltd
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-3
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-3-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-3-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-3-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-3-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-3-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-4
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-4-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-4-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-4-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-4-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-4-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-Micro-5-4-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Hardened
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Hardened-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Hardened-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAP-Hardened-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAPCAL
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAPCAL-Azure
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAPCAL-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SAPCAL-GCE
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
SUSE Linux Enterprise Micro 5.3
libopenssl-1_1-devel-1.1.1l-150400.7.42.1
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
SUSE Linux Enterprise Micro 5.4
libopenssl-1_1-devel-1.1.1l-150400.7.42.1
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
libopenssl-1_1-devel-1.1.1l-150400.7.42.1
libopenssl-1_1-devel-32bit-1.1.1l-150400.7.42.1
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
openSUSE Leap 15.4
libopenssl-1_1-devel-1.1.1l-150400.7.42.1
libopenssl-1_1-devel-32bit-1.1.1l-150400.7.42.1
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-32bit-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-32bit-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1
openssl-1_1-doc-1.1.1l-150400.7.42.1
openSUSE Leap Micro 5.3
libopenssl-1_1-devel-1.1.1l-150400.7.42.1
libopenssl1_1-1.1.1l-150400.7.42.1
libopenssl1_1-hmac-1.1.1l-150400.7.42.1
openssl-1_1-1.1.1l-150400.7.42.1

Ссылки

Описание

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.

Затронутые продукты
Container bci/bci-init:15.4:libopenssl1_1-1.1.1l-150400.7.42.1
Container bci/bci-init:15.4:libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Container bci/node:16:libopenssl1_1-1.1.1l-150400.7.42.1
Container bci/node:16:libopenssl1_1-hmac-1.1.1l-150400.7.42.1
Ссылки
Уязвимость SUSE-SU-2023:2648-1