Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseSUSE-SU-2022:2306-1
HistoryJul 06, 2022 - 12:00 a.m.

Security update for openssl-3 (important)

2022-07-0600:00:00
lists.opensuse.org
38

0.106 Low

EPSS

Percentile

95.1%

JSON

An update that solves 6 vulnerabilities and has one errata
is now available.

Description:

This update for openssl-3 fixes the following issues:

  • CVE-2022-2068: Fixed more shell code injection issues in c_rehash.
    (bsc#1200550)
  • CVE-2022-1292: Properly sanitise shell metacharacters in c_rehash
    script. (bsc#1199166)
  • CVE-2022-1343: Fixed incorrect signature verification in
    OCSP_basic_verify (bsc#1199167).
  • CVE-2022-2097: Fixed partial missing encryption in AES OCB mode
    (bsc#1201099).
  • CVE-2022-1434: Fixed incorrect MAC key used in the RC4-MD5 ciphersuite
    (bsc#1199168).
  • CVE-2022-1473: Fixed resource leakage when decoding certificates and
    keys (bsc#1199169).

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.4:

    zypper in -t patch openSUSE-SLE-15.4-2022-2306=1

  • SUSE Linux Enterprise Module for Basesystem 15-SP4:

    zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2306=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.4aarch64< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.4ppc64le< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.4s390x< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.4x86_64< - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Leap15.4noarch< - openSUSE Leap 15.4 (noarch):- openSUSE Leap 15.4 (noarch):.noarch.rpm
openSUSE Leap15.4x86_64< - openSUSE Leap 15.4 (x86_64):- openSUSE Leap 15.4 (x86_64):.x86_64.rpm
SUSE Linux Enterprise Module for Basesystem 15SP4aarch64<  SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64):- SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
SUSE Linux Enterprise Module for Basesystem 15SP4ppc64le<  SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64):- SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
SUSE Linux Enterprise Module for Basesystem 15SP4s390x<  SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64):- SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64):.s390x.rpm
SUSE Linux Enterprise Module for Basesystem 15SP4x86_64<  SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64):- SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64):.x86_64.rpm

Related

nessus 65
openvas 41
osv 11
redhat 6
oraclelinux 4
almalinux 2
ics 1
ubuntu 3
freebsd 1
ibm 14
cloudfoundry 1
nodejsblog 1
redos 1
aix 1
rocky 1
suse 4
cloudlinux 1
ubuntucve 2
fedora 1
altlinux 2
broadcom 1
nvd 3
amazon 3
openssl 1
slackware 2
alpinelinux 2
f5 3
cve 3
cvelist 1
debiancve 3
prion 1
redhatcve 4
photon 2
gentoo 1
veracode 3
rustsec 2
github 1
nessus
nessus
SUSE SLED15 / SLES15 Security Update : openssl-3 (SUSE-SU-2022:2306-1)
2022-07-08 00:00:00
AlmaLinux 9 : openssl (ALSA-2022:6224)
2022-11-16 00:00:00
Amazon Linux 2022 : (ALAS2022-2022-195)
2022-11-05 00:00:00
openvas
openvas
openSUSE: Security Advisory for openssl-3 (SUSE-SU-2022:2306-1)
2022-07-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2306-1)
2022-07-07 00:00:00
OpenSSL: Multiple Vulnerabilities (May 2022) - Linux
2022-05-04 00:00:00
osv
osv
Moderate: openssl security and bug fix update
2022-08-30 00:00:00
openssl, openssl1.0 vulnerabilities
2022-05-04 13:21:13
Moderate: openssl security update
2022-08-03 00:00:00
redhat
redhat
(RHSA-2022:6224) Moderate: openssl security and bug fix update
2022-08-30 15:46:32
(RHSA-2022:5818) Moderate: openssl security update
2022-08-02 07:00:02
(RHSA-2022:8913) Moderate: Red Hat JBoss Web Server 5.7.1 release and security update
2022-12-12 12:28:19
oraclelinux
oraclelinux
openssl security update
2022-08-31 00:00:00
openssl security and bug fix update
2022-08-30 00:00:00
openssl security update
2022-08-05 00:00:00
almalinux
almalinux
Moderate: openssl security and bug fix update
2022-08-30 00:00:00
Moderate: openssl security update
2022-08-03 00:00:00
ics
ics
Siemens Brownfield Connectivity Client
2023-02-16 12:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2022-05-04 00:00:00
Node.js vulnerabilities
2023-10-30 00:00:00
OpenSSL vulnerabilities
2022-05-26 00:00:00
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2022-05-03 00:00:00
ibm
ibm
Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities [CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473]
2023-07-12 11:11:22
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to issues in OpenSSL (CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473 )
2023-02-01 15:37:39
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to multiple openSSL vulnerabilities in Node.js (CVE-2022-1434, CVE-2022-1343, CVE-2022-1473)
2022-07-04 13:19:17
cloudfoundry
cloudfoundry
USN-5402-1: OpenSSL vulnerabilities | Cloud Foundry
2022-07-29 00:00:00
nodejsblog
nodejsblog
OpenSSL update assessment, and Node.js project plans
2022-05-05 00:00:00
redos
redos
ROS-20220524-01
2022-05-24 00:00:00
aix
aix
AIX is vulnerable to arbitrary command execution due to OpenSSL
2022-08-17 16:39:03
rocky
rocky
openssl security update
2022-08-02 07:00:02
suse
suse
Security update for openssl-1_1 (important)
2022-07-06 00:00:00
Security update for openssl-1_1 (moderate)
2022-09-01 00:00:00
Security update for openssl-1_0_0 (moderate)
2022-07-07 00:00:00
cloudlinux
cloudlinux
Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068
2022-07-14 16:53:26
ubuntucve
ubuntucve
CVE-2022-2068
2022-06-21 00:00:00
CVE-2022-1343
2022-05-03 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: openssl-1.1.1q-1.fc35
2022-07-23 02:27:30
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1p-alt1
2022-06-22 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1p-alt1
2022-06-24 00:00:00
broadcom
broadcom
openssl file names of certificates being hashed were possibly passed to a command executed through the shell
2023-08-01 00:00:00
nvd
nvd
CVE-2022-2068
2022-06-21 15:15:09
CVE-2022-1343
2022-05-03 16:15:18
CVE-2022-1434
2022-05-03 16:15:18
amazon
amazon
Medium: openssl
2022-07-28 21:55:00
Medium: openssl
2022-07-28 20:38:00
Medium: openssl11
2022-07-28 21:55:00
openssl
openssl
Vulnerability in OpenSSL CVE-2022-2068
2022-06-21 00:00:00
slackware
slackware
[slackware-security] openssl
2022-06-23 05:32:23
[slackware-security] Slackware 14.2 openssl
2022-06-28 19:28:45
alpinelinux
alpinelinux
CVE-2022-2068
2022-06-21 15:15:09
CVE-2022-1434
2022-05-03 16:15:18
f5
f5
K21600298 : OpenSSL vulnerabilities CVE-2022-1292 and CVE-2022-2068
2022-08-05 00:00:00
K09413574 : OpenSSL vulnerability CVE-2022-1434
2022-05-27 00:00:00
K00334558 : OpenSSL vulnerability CVE-2022-1473
2022-06-02 00:00:00
cve
cve
CVE-2022-2068
2022-06-21 15:15:09
CVE-2022-1343
2022-05-03 16:15:18
CVE-2022-1434
2022-05-03 16:15:18
cvelist
cvelist
CVE-2022-2068 The c_rehash script allows command injection
2022-06-21 00:00:00
debiancve
debiancve
CVE-2022-2068
2022-06-21 15:15:09
CVE-2022-1434
2022-05-03 16:15:18
CVE-2022-1343
2022-05-03 16:15:18
prion
prion
Command injection
2022-06-21 15:15:00
redhatcve
redhatcve
CVE-2022-2068
2022-06-22 06:36:12
CVE-2022-1343
2022-05-18 22:42:51
CVE-2022-1434
2022-05-18 22:42:56
photon
photon
Critical Photon OS Security Update - PHSA-2022-4.0-0185
2022-05-18 00:00:00
Critical Photon OS Security Update - PHSA-2022-0185
2022-05-18 00:00:00
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2022-10-16 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2022-05-13 10:37:10
Insecure Certificate Validation
2022-05-12 21:28:54
Denial Of Service (DoS)
2022-05-13 08:43:12
rustsec
rustsec
Incorrect MAC key used in the RC4-MD5 ciphersuite
2022-05-03 12:00:00
Resource leakage when decoding certificates and keys
2022-05-03 12:00:00
github
github
Incorrect MAC key used in the RC4-MD5 ciphersuite
2022-05-04 00:00:22

0.106 Low

EPSS

Percentile

95.1%

JSON
Related for SUSE-SU-2022:2306-1
nessus65openvas41osv11redhat6oraclelinux4almalinux2ics1ubuntu3freebsd1ibm14cloudfoundry1nodejsblog1redos1aix1rocky1suse4cloudlinux1ubuntucve2fedora1altlinux2broadcom1nvd3amazon3openssl1slackware2alpinelinux2f53cve3cvelist1debiancve3prion1redhatcve4photon2gentoo1veracode3rustsec2github1