SUSE-SU-2024:0833-1

Опубликовано: 11 мар. 2024

Источник: suse-cvrf

Описание

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

Список пакетов

Container rancher/elemental-teal-rt/5.4:latest

libopenssl1_1-1.1.1l-150400.7.63.1

Container rancher/elemental-teal/5.4:latest

libopenssl1_1-1.1.1l-150400.7.63.1

Container suse/ltss/sle15.4/bci-base:latest

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Container suse/manager/4.3/proxy-httpd:latest

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

Container suse/manager/4.3/proxy-salt-broker:latest

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Container suse/manager/4.3/proxy-squid:latest

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

Container suse/manager/4.3/proxy-ssh:latest

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

Container suse/manager/4.3/proxy-tftpd:latest

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Container suse/sle-micro-rancher/5.3:latest

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Container suse/sle-micro-rancher/5.4:latest

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Container suse/sle-micro/5.3/toolbox:latest

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Container suse/sle-micro/5.4/toolbox:latest

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-CHOST-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-CHOST-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-CHOST-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-CHOST-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-HPC-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-HPC-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-HPC-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-HPC-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-HPC-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-HPC-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Hardened-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Hardened-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Hardened-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Hardened-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Server-4-3

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-3

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-3-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-3-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-3-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-4

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-4-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-4-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-4-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-Micro-5-4-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Hardened

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Hardened-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Hardened-BYOS

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAP-Hardened-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAPCAL

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAPCAL-Azure

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAPCAL-EC2

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Image SLES15-SP4-SAPCAL-GCE

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl-1_1-devel-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl-1_1-devel-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

SUSE Linux Enterprise Micro 5.3

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

SUSE Linux Enterprise Micro 5.4

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl-1_1-devel-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl-1_1-devel-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

SUSE Manager Proxy 4.3

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl-1_1-devel-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

SUSE Manager Server 4.3

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl-1_1-devel-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-32bit-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-32bit-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

openSUSE Leap Micro 5.3

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

openSUSE Leap Micro 5.4

libopenssl-1_1-devel-1.1.1l-150400.7.63.1

libopenssl1_1-1.1.1l-150400.7.63.1

libopenssl1_1-hmac-1.1.1l-150400.7.63.1

openssl-1_1-1.1.1l-150400.7.63.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240833-1/
Link for SUSE-SU-2024:0833-1
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018139.html
E-Mail link for SUSE-SU-2024:0833-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1219243
SUSE Bug 1219243
https://www.suse.com/security/cve/CVE-2024-0727/
SUSE CVE CVE-2024-0727 page

Описание

Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results in OpenSSL crashing. If an application processes PKCS12 files from an untrusted source using the OpenSSL APIs then that application will be vulnerable to this issue. OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() and PKCS12_newpass(). We have also fixed a similar issue in SMIME_write_PKCS7(). However since this function is related to writing data we do not consider it security significant. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.

Затронутые продукты

Container rancher/elemental-teal-rt/5.4:latest:libopenssl1_1-1.1.1l-150400.7.63.1

Container rancher/elemental-teal/5.4:latest:libopenssl1_1-1.1.1l-150400.7.63.1

Container suse/ltss/sle15.4/bci-base:latest:libopenssl1_1-1.1.1l-150400.7.63.1

Container suse/ltss/sle15.4/bci-base:latest:libopenssl1_1-hmac-1.1.1l-150400.7.63.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-0727.html
CVE-2024-0727
https://bugzilla.suse.com/1219243
SUSE Bug 1219243