Описание
Security update for qatengine
This update for qatengine fixes the following issues:
- CVE-2022-43507: Fixed a buffer overflow issue with SHA3. (bsc#1211296)
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP4
qatengine-0.6.10-150400.3.3.1
openSUSE Leap 15.4
qatengine-0.6.10-150400.3.3.1
Ссылки
- Link for SUSE-SU-2023:3290-1
- E-Mail link for SUSE-SU-2023:3290-1
- SUSE Security Ratings
- SUSE Bug 1211296
- SUSE CVE CVE-2022-43507 page
Описание
Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:qatengine-0.6.10-150400.3.3.1
openSUSE Leap 15.4:qatengine-0.6.10-150400.3.3.1
Ссылки
- CVE-2022-43507
- SUSE Bug 1211296