Описание
Security update for libcryptopp
This update for libcryptopp fixes the following issues:
- CVE-2023-50979: Fixed side-channel leakage during decryption with PKCS#1v1.5 padding. (bsc#1218217)
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP6
libcryptopp-devel-8.6.0-150400.3.12.1
libcryptopp8_6_0-8.6.0-150400.3.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libcryptopp-devel-8.6.0-150400.3.12.1
libcryptopp8_6_0-8.6.0-150400.3.12.1
openSUSE Leap 15.6
libcryptopp-devel-8.6.0-150400.3.12.1
libcryptopp8_6_0-8.6.0-150400.3.12.1
libcryptopp8_6_0-32bit-8.6.0-150400.3.12.1
Ссылки
- Link for SUSE-SU-2025:4310-1
- E-Mail link for SUSE-SU-2025:4310-1
- SUSE Security Ratings
- SUSE Bug 1218217
- SUSE CVE CVE-2023-50979 page
Описание
Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:libcryptopp-devel-8.6.0-150400.3.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libcryptopp8_6_0-8.6.0-150400.3.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libcryptopp-devel-8.6.0-150400.3.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libcryptopp8_6_0-8.6.0-150400.3.12.1
Ссылки
- CVE-2023-50979
- SUSE Bug 1218217