SUSE-SU-2023:29171-1

CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534).
Update further expiring certificates that affect tests (bsc#1201627)

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / openssl-1_1

Package

Name: openssl-1_1
Purl: pkg:rpm/suse/openssl-1_1&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1l-150500.17.6.1

Ecosystem specific

{
    "binaries": [
        {
            "libopenssl1_1-hmac-32bit": "1.1.1l-150500.17.6.1",
            "libopenssl1_1-hmac": "1.1.1l-150500.17.6.1",
            "openssl-1_1": "1.1.1l-150500.17.6.1",
            "libopenssl1_1": "1.1.1l-150500.17.6.1",
            "libopenssl1_1-32bit": "1.1.1l-150500.17.6.1",
            "libopenssl-1_1-devel": "1.1.1l-150500.17.6.1"
        }
    ]
}

openSUSE:Leap 15.5 / openssl-1_1

Package

Name: openssl-1_1
Purl: pkg:rpm/opensuse/openssl-1_1&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1l-150500.17.6.1

Ecosystem specific

{
    "binaries": [
        {
            "libopenssl1_1-hmac": "1.1.1l-150500.17.6.1",
            "libopenssl1_1": "1.1.1l-150500.17.6.1",
            "libopenssl1_1-32bit": "1.1.1l-150500.17.6.1",
            "libopenssl-1_1-devel": "1.1.1l-150500.17.6.1",
            "libopenssl1_1-hmac-32bit": "1.1.1l-150500.17.6.1",
            "openssl-1_1": "1.1.1l-150500.17.6.1",
            "openssl-1_1-doc": "1.1.1l-150500.17.6.1",
            "libopenssl-1_1-devel-32bit": "1.1.1l-150500.17.6.1"
        }
    ]
}