Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:3943-1

Опубликовано: 05 нояб. 2025
Источник: suse-cvrf

Описание

Security update for qatengine, qatlib

This update for qatengine, qatlib fixes the following issues:

Note that the 1.6.1 release included in 1.7.0 fixes the following vulnerabilities:

  • bsc#1233363 (CVE-2024-28885)
  • bsc#1233365 (CVE-2024-31074)
  • bsc#1233366 (CVE-2024-33617)

Update to 1.7.0:

  • ipp-crypto name change to cryptography-primitives
  • QAT_SW GCM memory leak fix in cleanup function
  • Update limitation section in README for v1.7.0 release
  • Fix build with OPENSSL_NO_ENGINE
  • Fix for build issues with qatprovider in qatlib
  • Bug fixes and README updates to v1.7.0
  • Remove qat_contig_mem driver support
  • Add support for building QAT Engine ENGINE and PROVIDER modules with QuicTLS 3.x libraries
  • Fix for DSA issue with openssl3.2
  • Fix missing lower bounds check on index i
  • Enabled SW Fallback support for FBSD
  • Fix for segfault issue when SHIM config section is unavailable
  • Fix for Coverity & Resource leak
  • Fix for RSA failure with SVM enabled in openssl-3.2
  • SM3 Memory Leak Issue Fix
  • Fix qatprovider lib name issue with system openssl

Update to 1.6.0:

  • Fix issue with make depend for QAT_SW
  • QAT_HW GCM Memleak fix & bug fixes
  • QAT2.0 FreeBSD14 intree driver support
  • Fix OpenSSL 3.2 compatibility issues
  • Optimize hex dump logging
  • Clear job tlv on error
  • QAT_HW RSA Encrypt and Decrypt provider support
  • QAT_HW AES-CCM Provider support
  • Add ECDH keymgmt support for provider
  • Fix QAT_HW SM2 memory leak
  • Enable qaeMemFreeNonZeroNUMA() for qatlib
  • Fix polling issue for the process that doesn't have QAT_HW instance
  • Fix SHA3 qctx initialization issue & potential memleak
  • Fix compilation error in SM2 with qat_contig_mem
  • Update year in copyright information to 2024

Update to 1.5.0:

  • use new --enable-qat_insecure_algorithms to avoid regressions
  • improve support for SM{2,3,4} ciphers
  • improve SW fallback support
  • many bug fixes, refactorisations and documentation updates

qatlib was updated to 24.09.0:

version update to 24.02.0:

  • Support DC NS (NoSession) APIs
  • Support Symmetric Crypto SM3 & SM4
  • Support Asymmetric Crypto SM2
  • Support DC CompressBound APIs
  • Bug Fixes. See Resolved section in README.md

update to 23.11.0:

  • use new --enable-legacy-algorithms to avoid regressions
  • add support for data compression chaining (hash then compress)
  • add support for additional configuration profiles
  • add support DC NS (NoSession) APIs
  • add support DC CompressBound APIs
  • add Support for Chinese SM{2,3,4} ciphers
  • bump shared library major to 4
  • refactoring, bug fixes and documentation updates

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libqat4-24.09.0-150500.3.3.1
libqatzip3-1.1.0-150500.3.2.1
libusdm0-24.09.0-150500.3.3.1
qatengine-1.7.0-150500.3.3.1
qatlib-24.09.0-150500.3.3.1
qatlib-devel-24.09.0-150500.3.3.1
qatzip-1.1.0-150500.3.2.1
qatzip-devel-1.1.0-150500.3.2.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libqat4-24.09.0-150500.3.3.1
libqatzip3-1.1.0-150500.3.2.1
libusdm0-24.09.0-150500.3.3.1
qatengine-1.7.0-150500.3.3.1
qatlib-24.09.0-150500.3.3.1
qatlib-devel-24.09.0-150500.3.3.1
qatzip-1.1.0-150500.3.2.1
qatzip-devel-1.1.0-150500.3.2.1
SUSE Linux Enterprise Server 15 SP5-LTSS
libqat4-24.09.0-150500.3.3.1
libqatzip3-1.1.0-150500.3.2.1
libusdm0-24.09.0-150500.3.3.1
qatengine-1.7.0-150500.3.3.1
qatlib-24.09.0-150500.3.3.1
qatlib-devel-24.09.0-150500.3.3.1
qatzip-1.1.0-150500.3.2.1
qatzip-devel-1.1.0-150500.3.2.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
libqat4-24.09.0-150500.3.3.1
libqatzip3-1.1.0-150500.3.2.1
libusdm0-24.09.0-150500.3.3.1
qatengine-1.7.0-150500.3.3.1
qatlib-24.09.0-150500.3.3.1
qatlib-devel-24.09.0-150500.3.3.1
qatzip-1.1.0-150500.3.2.1
qatzip-devel-1.1.0-150500.3.2.1

Описание

Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.


Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libqat4-24.09.0-150500.3.3.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libqatzip3-1.1.0-150500.3.2.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libusdm0-24.09.0-150500.3.3.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:qatengine-1.7.0-150500.3.3.1

Ссылки

Описание

Observable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.


Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libqat4-24.09.0-150500.3.3.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libqatzip3-1.1.0-150500.3.2.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libusdm0-24.09.0-150500.3.3.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:qatengine-1.7.0-150500.3.3.1

Ссылки

Описание

Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.


Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libqat4-24.09.0-150500.3.3.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libqatzip3-1.1.0-150500.3.2.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libusdm0-24.09.0-150500.3.3.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:qatengine-1.7.0-150500.3.3.1

Ссылки
Уязвимость SUSE-SU-2025:3943-1