SUSE-SU-2024:0832-1

Опубликовано: 11 мар. 2024

Источник: suse-cvrf

Описание

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

Список пакетов

Container suse/ltss/sle15.3/bci-base:latest

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Container suse/sle-micro-rancher/5.2:latest

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Container suse/sle-micro/5.1/toolbox:latest

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Container suse/sle-micro/5.2/toolbox:latest

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Container suse/sle15:15.2

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-CHOST-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-CHOST-BYOS-EC2

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-CHOST-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-HPC-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-HPC-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-SAP-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-SAP-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-SAPCAL-Azure

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

Image SLES15-SP3-SAPCAL-GCE

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

SUSE Enterprise Storage 7.1

libopenssl-1_1-devel-1.1.1d-150200.11.85.1

libopenssl-1_1-devel-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

openssl-1_1-doc-1.1.1d-150200.11.85.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libopenssl-1_1-devel-1.1.1d-150200.11.85.1

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libopenssl-1_1-devel-1.1.1d-150200.11.85.1

libopenssl-1_1-devel-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

openssl-1_1-doc-1.1.1d-150200.11.85.1

SUSE Linux Enterprise Micro 5.1

libopenssl-1_1-devel-1.1.1d-150200.11.85.1

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

SUSE Linux Enterprise Micro 5.2

libopenssl-1_1-devel-1.1.1d-150200.11.85.1

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libopenssl-1_1-devel-1.1.1d-150200.11.85.1

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libopenssl-1_1-devel-1.1.1d-150200.11.85.1

libopenssl-1_1-devel-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

openssl-1_1-doc-1.1.1d-150200.11.85.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libopenssl-1_1-devel-1.1.1d-150200.11.85.1

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libopenssl-1_1-devel-1.1.1d-150200.11.85.1

libopenssl-1_1-devel-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-1.1.1d-150200.11.85.1

libopenssl1_1-32bit-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-1.1.1d-150200.11.85.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.85.1

openssl-1_1-1.1.1d-150200.11.85.1

openssl-1_1-doc-1.1.1d-150200.11.85.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240832-1/
Link for SUSE-SU-2024:0832-1
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018140.html
E-Mail link for SUSE-SU-2024:0832-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1219243
SUSE Bug 1219243
https://www.suse.com/security/cve/CVE-2024-0727/
SUSE CVE CVE-2024-0727 page

Описание

Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results in OpenSSL crashing. If an application processes PKCS12 files from an untrusted source using the OpenSSL APIs then that application will be vulnerable to this issue. OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() and PKCS12_newpass(). We have also fixed a similar issue in SMIME_write_PKCS7(). However since this function is related to writing data we do not consider it security significant. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.

Затронутые продукты

Container suse/ltss/sle15.3/bci-base:latest:libopenssl1_1-1.1.1d-150200.11.85.1

Container suse/ltss/sle15.3/bci-base:latest:libopenssl1_1-hmac-1.1.1d-150200.11.85.1

Container suse/ltss/sle15.3/bci-base:latest:openssl-1_1-1.1.1d-150200.11.85.1

Container suse/sle-micro-rancher/5.2:latest:libopenssl1_1-1.1.1d-150200.11.85.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-0727.html
CVE-2024-0727
https://bugzilla.suse.com/1219243
SUSE Bug 1219243

SUSE-SU-2024:0832-1

Описание

Список пакетов

Container suse/ltss/sle15.3/bci-base:latest

Container suse/sle-micro-rancher/5.2:latest

Container suse/sle-micro/5.1/toolbox:latest

Container suse/sle-micro/5.2/toolbox:latest

Container suse/sle15:15.2

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-Aliyun

Image SLES15-SP3-CHOST-BYOS-Azure

Image SLES15-SP3-CHOST-BYOS-EC2

Image SLES15-SP3-CHOST-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-Micro-5-1-BYOS-Azure

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-1-BYOS-GCE

Image SLES15-SP3-Micro-5-2-BYOS-Azure

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-2-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

Ссылки

Уязвимость: CVE-2024-0727

Описание

Затронутые продукты

Ссылки