SUSE-SU-2024:0549-1

Опубликовано: 20 фев. 2024

Источник: suse-cvrf

Описание

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

Список пакетов

Container bci/bci-base-fips:15.5

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/bci-init:15.5

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/bci-sle15-kernel-module-devel:15.5

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container bci/golang:1.20-openssl

libopenssl-1_1-devel-1.1.1l-150500.17.25.1

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container bci/golang:1.21

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/golang:latest

libopenssl-1_1-devel-1.1.1l-150500.17.25.1

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container bci/node:18

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/nodejs:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/openjdk-devel:11

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container bci/openjdk-devel:17

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container bci/openjdk:11

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container bci/openjdk:17

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container bci/php-apache:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/php-fpm:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/php:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/python:3

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container bci/python:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container bci/ruby:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/rust:1.77

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/rust:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container rancher/elemental-operator:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container rancher/seedimage-builder:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container suse/389-ds:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container suse/git:latest

libopenssl1_1-1.1.1l-150500.17.25.1

Container suse/helm:latest

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container suse/ltss/sle15.5/sle15:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container suse/nginx:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container suse/pcp:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container suse/postgres:15

libopenssl1_1-1.1.1l-150500.17.25.1

Container suse/postgres:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container suse/registry:latest

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container suse/rmt-mariadb-client:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container suse/rmt-mariadb:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container suse/rmt-server:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container suse/sle-micro/5.5/toolbox:latest

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container suse/sle-micro/5.5:latest

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container suse/sle-micro/base-5.5:latest

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Container suse/sle-micro/kvm-5.5:latest

libopenssl1_1-1.1.1l-150500.17.25.1

Container suse/sle-micro/rt-5.5:latest

libopenssl1_1-1.1.1l-150500.17.25.1

Container suse/sle15:15.5

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Azure-3P

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Azure-Basic

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Azure-Standard

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-CHOST-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-CHOST-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-CHOST-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-CHOST-BYOS-GDC

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-HPC-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-HPC-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-HPC-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-HPC-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Hardened-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Hardened-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Hardened-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Server-5-0

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Server-5-0-BYOS

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Micro-5-5

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Micro-5-5-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Micro-5-5-BYOS

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Micro-5-5-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-Micro-5-5-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Azure-3P

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-32bit-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-32bit-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-32bit-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-32bit-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Hardened-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAP-Hardened-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAPCAL-Azure

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-32bit-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAPCAL-EC2

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-32bit-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

Image SLES15-SP5-SAPCAL-GCE

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-32bit-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

SUSE Linux Enterprise Micro 5.5

libopenssl-1_1-devel-1.1.1l-150500.17.25.1

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

libopenssl-1_1-devel-1.1.1l-150500.17.25.1

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-32bit-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-32bit-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

openSUSE Leap 15.5

libopenssl-1_1-devel-1.1.1l-150500.17.25.1

libopenssl-1_1-devel-32bit-1.1.1l-150500.17.25.1

libopenssl1_1-1.1.1l-150500.17.25.1

libopenssl1_1-32bit-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-1.1.1l-150500.17.25.1

libopenssl1_1-hmac-32bit-1.1.1l-150500.17.25.1

openssl-1_1-1.1.1l-150500.17.25.1

openssl-1_1-doc-1.1.1l-150500.17.25.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240549-1/
Link for SUSE-SU-2024:0549-1
https://lists.suse.com/pipermail/sle-security-updates/2024-February/017969.html
E-Mail link for SUSE-SU-2024:0549-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1219243
SUSE Bug 1219243
https://www.suse.com/security/cve/CVE-2024-0727/
SUSE CVE CVE-2024-0727 page

Описание

Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results in OpenSSL crashing. If an application processes PKCS12 files from an untrusted source using the OpenSSL APIs then that application will be vulnerable to this issue. OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() and PKCS12_newpass(). We have also fixed a similar issue in SMIME_write_PKCS7(). However since this function is related to writing data we do not consider it security significant. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.

Затронутые продукты

Container bci/bci-base-fips:15.5:libopenssl1_1-1.1.1l-150500.17.25.1

Container bci/bci-base-fips:15.5:libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Container bci/bci-init:15.5:libopenssl1_1-1.1.1l-150500.17.25.1

Container bci/bci-init:15.5:libopenssl1_1-hmac-1.1.1l-150500.17.25.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-0727.html
CVE-2024-0727
https://bugzilla.suse.com/1219243
SUSE Bug 1219243