Summary
This update for openssl-1_1 fixes the following issues:
openssl-1_1:
- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
- Fix PAC pointer authentication in ARM (bsc#1195856)
- Pull libopenssl-1_1 when updating openssl-1_1 with the same version (bsc#1195792)
- FIPS: Fix function and reason error codes (bsc#1182959)
- Enable zlib compression support (bsc#1195149)
glibc:
- Resolve installation issue of `glibc-devel` in SUSE Linux Enterprise Micro 5.1
linux-glibc-devel:
- Resolve installation issue of `linux-kernel-headers` in SUSE Linux Enterprise Micro 5.1
libxcrypt:
- Resolve installation issue of `libxcrypt-devel` in SUSE Linux Enterprise Micro 5.1
zlib:
- Resolve installation issue of `zlib-devel` in SUSE Linux Enterprise Micro 5.1
Fixed packages 55
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Enterprise Storage 6 | zlib | 1.2.11-3.26.10 |
| SUSE · Enterprise Storage 7 | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · Enterprise Storage 7 | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · Enterprise Storage 7 | zlib | 1.2.11-3.26.10 |
| SUSE · SLE HPC 15 SP1 Linux Enterprise High Performance Computing 15 SP1-ESPOS | zlib | 1.2.11-3.26.10 |
| SUSE · SLE HPC 15 SP1 Linux Enterprise High Performance Computing 15 SP1-LTSS | zlib | 1.2.11-3.26.10 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-ESPOS | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-ESPOS | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-ESPOS | zlib | 1.2.11-3.26.10 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | zlib | 1.2.11-3.26.10 |
| SUSE · SLE HPC 15 Linux Enterprise High Performance Computing 15-ESPOS | zlib | 1.2.11-3.26.10 |
| SUSE · SLE HPC 15 Linux Enterprise High Performance Computing 15-LTSS | zlib | 1.2.11-3.26.10 |
| SUSE · SLE Micro 5.0 Linux Enterprise Micro 5.0 | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · SLE Micro 5.0 Linux Enterprise Micro 5.0 | zlib | 1.2.11-3.26.10 |
| SUSE · SLE Micro 5.1 Linux Enterprise Micro 5.1 | glibc | 2.31-150300.20.7 |
| SUSE · SLE Micro 5.1 Linux Enterprise Micro 5.1 | libxcrypt | 4.4.15-150300.4.2.41 |
| SUSE · SLE Micro 5.1 Linux Enterprise Micro 5.1 | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · SLE Micro 5.1 Linux Enterprise Micro 5.1 | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · SLE Micro 5.1 Linux Enterprise Micro 5.1 | zlib | 1.2.11-3.26.10 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Basesystem 15 SP3 | glibc | 2.31-150300.20.7 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Basesystem 15 SP3 | libxcrypt | 4.4.15-150300.4.2.41 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Basesystem 15 SP3 | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Basesystem 15 SP3 | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Basesystem 15 SP3 | zlib | 1.2.11-3.26.10 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Development Tools 15 SP3 | glibc | 2.31-150300.20.1 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Development Tools 15 SP3 | libxcrypt | 4.4.15-150300.4.2.41 |
| SUSE · SLES 15 SP3 Linux Enterprise Module for Development Tools 15 SP3 | zlib | 1.2.11-3.26.10 |
| SUSE · SLE Real Time 15 SP2 Linux Enterprise Real Time 15 SP2 | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · SLE Real Time 15 SP2 Linux Enterprise Real Time 15 SP2 | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · SLE Real Time 15 SP2 Linux Enterprise Real Time 15 SP2 | zlib | 1.2.11-3.26.10 |
| SUSE · SLES 15 SP1 Linux Enterprise Server 15 SP1-BCL | zlib | 1.2.11-3.26.10 |
| SUSE · SLES 15 SP1 Linux Enterprise Server 15 SP1-LTSS | zlib | 1.2.11-3.26.10 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-BCL | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-BCL | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-BCL | zlib | 1.2.11-3.26.10 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | zlib | 1.2.11-3.26.10 |
| SUSE · SLES 15 Linux Enterprise Server 15-LTSS | zlib | 1.2.11-3.26.10 |
| SUSE · SLES for SAP 15 Linux Enterprise Server for SAP Applications 15 | zlib | 1.2.11-3.26.10 |
| SUSE · SLES for SAP 15 SP1 Linux Enterprise Server for SAP Applications 15 SP1 | zlib | 1.2.11-3.26.10 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | zlib | 1.2.11-3.26.10 |
| SUSE · Manager Proxy 4.1 | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · Manager Proxy 4.1 | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · Manager Proxy 4.1 | zlib | 1.2.11-3.26.10 |
| SUSE · Manager Retail Branch Server 4.1 | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · Manager Retail Branch Server 4.1 | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · Manager Retail Branch Server 4.1 | zlib | 1.2.11-3.26.10 |
| SUSE · Manager Server 4.1 | linux-glibc-devel | 5.3-3.2.10 |
| SUSE · Manager Server 4.1 | openssl-1_1 | 1.1.1d-11.43.1 |
| SUSE · Manager Server 4.1 | zlib | 1.2.11-3.26.10 |
Vulnerabilities 1
-
High 7.5
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…