SUSE-SU-2024:1633-1

Опубликовано: 14 мая 2024

Источник: suse-cvrf

Описание

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548).

Список пакетов

Container suse/ltss/sle15.3/bci-base:latest

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Container suse/sle-micro-rancher/5.2:latest

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Container suse/sle-micro/5.1/toolbox:latest

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Container suse/sle-micro/5.2/toolbox:latest

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Container suse/sle15:15.2

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-CHOST-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-CHOST-BYOS-EC2

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-CHOST-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-HPC-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-HPC-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-SAP-BYOS-Azure

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-SAP-BYOS-GCE

libopenssl1_1-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-SAPCAL-Azure

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

Image SLES15-SP3-SAPCAL-GCE

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

SUSE Enterprise Storage 7.1

libopenssl-1_1-devel-1.1.1d-150200.11.88.1

libopenssl-1_1-devel-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

openssl-1_1-doc-1.1.1d-150200.11.88.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libopenssl-1_1-devel-1.1.1d-150200.11.88.1

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libopenssl-1_1-devel-1.1.1d-150200.11.88.1

libopenssl-1_1-devel-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

openssl-1_1-doc-1.1.1d-150200.11.88.1

SUSE Linux Enterprise Micro 5.1

libopenssl-1_1-devel-1.1.1d-150200.11.88.1

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

SUSE Linux Enterprise Micro 5.2

libopenssl-1_1-devel-1.1.1d-150200.11.88.1

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libopenssl-1_1-devel-1.1.1d-150200.11.88.1

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libopenssl-1_1-devel-1.1.1d-150200.11.88.1

libopenssl-1_1-devel-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

openssl-1_1-doc-1.1.1d-150200.11.88.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libopenssl-1_1-devel-1.1.1d-150200.11.88.1

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libopenssl-1_1-devel-1.1.1d-150200.11.88.1

libopenssl-1_1-devel-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-1.1.1d-150200.11.88.1

libopenssl1_1-32bit-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-1.1.1d-150200.11.88.1

libopenssl1_1-hmac-32bit-1.1.1d-150200.11.88.1

openssl-1_1-1.1.1d-150200.11.88.1

openssl-1_1-doc-1.1.1d-150200.11.88.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20241633-1/
Link for SUSE-SU-2024:1633-1
https://lists.suse.com/pipermail/sle-updates/2024-May/035256.html
E-Mail link for SUSE-SU-2024:1633-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1222548
SUSE Bug 1222548
https://www.suse.com/security/cve/CVE-2024-2511/
SUSE CVE CVE-2024-2511 page

Описание

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation. This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 1.0.2 is also not affected by this issue.

Затронутые продукты

Container suse/ltss/sle15.3/bci-base:latest:libopenssl1_1-1.1.1d-150200.11.88.1

Container suse/ltss/sle15.3/bci-base:latest:libopenssl1_1-hmac-1.1.1d-150200.11.88.1

Container suse/ltss/sle15.3/bci-base:latest:openssl-1_1-1.1.1d-150200.11.88.1

Container suse/sle-micro-rancher/5.2:latest:libopenssl1_1-1.1.1d-150200.11.88.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-2511.html
CVE-2024-2511
https://bugzilla.suse.com/1222548
SUSE Bug 1222548

SUSE-SU-2024:1633-1

Описание

Список пакетов

Container suse/ltss/sle15.3/bci-base:latest

Container suse/sle-micro-rancher/5.2:latest

Container suse/sle-micro/5.1/toolbox:latest

Container suse/sle-micro/5.2/toolbox:latest

Container suse/sle15:15.2

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-Aliyun

Image SLES15-SP3-CHOST-BYOS-Azure

Image SLES15-SP3-CHOST-BYOS-EC2

Image SLES15-SP3-CHOST-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-Micro-5-1-BYOS-Azure

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-1-BYOS-GCE

Image SLES15-SP3-Micro-5-2-BYOS-Azure

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

Image SLES15-SP3-Micro-5-2-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

Ссылки

Уязвимость: CVE-2024-2511

Описание

Затронутые продукты

Ссылки