SUSE-SU-2023:2633-1: Security update for openssl-1_0_0

Q: Which systems should be checked for this update?

Check systems running the listed SUSE openssl-1_0_0 packages, including suse/openssl, suse/libopenssl, suse/libopenssl10, and suse/libopenssl10-debuginfo, on openSUSE Leap 15.4 or 15.5 for the specified architectures.

Q: What operational issue does this update address in addition to the timing side-channel fix?

It reworks the prior fix for the RSA decryption timing oracle because that earlier fix caused a severe 2–3x performance regression in typical use.

Published Feb 27, 2024

Updated

This update for openssl-100 fixes the following issues: CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534).

Affected Software

105 affected componentsFixes available

All of the following

SUSE openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libopenssl10-debuginfo<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/libopenssl10<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-cavs-debuginfo-1.0.2p-150000.3.79.1

1_0_0-cavs-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-cavs-1.0.2p-150000.3.79.1

1_0_0-cavs-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE openSUSE Leap 15.4 (x86_64)

suse/libopenssl<1_0_0-devel-32bit-1.0.2p-150000.3.79.1

1_0_0-devel-32bit-1.0.2p-150000.3.79.1

All of the following

SUSE openSUSE Leap 15.4 (noarch)

suse/openssl<1_0_0-doc-1.0.2p-150000.3.79.1

1_0_0-doc-1.0.2p-150000.3.79.1

All of the following

SUSE openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libopenssl10-debuginfo<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/libopenssl10<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-cavs-debuginfo-1.0.2p-150000.3.79.1

1_0_0-cavs-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-cavs-1.0.2p-150000.3.79.1

1_0_0-cavs-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE openSUSE Leap 15.5 (x86_64)

suse/libopenssl<1_0_0-devel-32bit-1.0.2p-150000.3.79.1

1_0_0-devel-32bit-1.0.2p-150000.3.79.1

All of the following

SUSE openSUSE Leap 15.5 (noarch)

suse/openssl<1_0_0-doc-1.0.2p-150000.3.79.1

1_0_0-doc-1.0.2p-150000.3.79.1

All of the following

SUSE Legacy Module 15-SP4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libopenssl10-debuginfo<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/libopenssl10<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE Legacy Module 15-SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libopenssl10-debuginfo<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/libopenssl10<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64)

Any of the following

suse/libopenssl10-debuginfo<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/libopenssl10<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64)

Any of the following

suse/libopenssl10-debuginfo<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/libopenssl10<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libopenssl10-debuginfo<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/libopenssl10<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64)

Any of the following

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)

Any of the following

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)

Any of the following

suse/libopenssl10-debuginfo<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/libopenssl10<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Enterprise Storage 7.1 (aarch64 x86_64)

Any of the following

suse/libopenssl10-debuginfo<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/libopenssl10<1.0.2p-150000.3.79.1

1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE Enterprise Storage 7 (aarch64 x86_64)

Any of the following

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

All of the following

SUSE SUSE CaaS Platform 4.0 (x86_64)

Any of the following

suse/openssl<1_0_0-debuginfo-1.0.2p-150000.3.79.1

1_0_0-debuginfo-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-debugsource-1.0.2p-150000.3.79.1

1_0_0-debugsource-1.0.2p-150000.3.79.1

suse/libopenssl<1_0_0-devel-1.0.2p-150000.3.79.1

1_0_0-devel-1.0.2p-150000.3.79.1

suse/openssl<1_0_0-1.0.2p-150000.3.79.1

1_0_0-1.0.2p-150000.3.79.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/libopenssl10-debuginfo to a version that resolves this vulnerability.
Fixed in 1.0.2p-150000.3.79.1
Upgrade
Upgrade suse/libopenssl10 to a version that resolves this vulnerability.
Fixed in 1.0.2p-150000.3.79.1
Upgrade
Upgrade suse/openssl to a version that resolves this vulnerability.
Fixed in 1_0_0-debuginfo-1.0.2p-150000.3.79.1
Upgrade
Upgrade suse/openssl to a version that resolves this vulnerability.
Fixed in 1_0_0-debugsource-1.0.2p-150000.3.79.1
Upgrade
Upgrade suse/openssl to a version that resolves this vulnerability.
Fixed in 1_0_0-cavs-debuginfo-1.0.2p-150000.3.79.1
Upgrade
Upgrade suse/openssl to a version that resolves this vulnerability.
Fixed in 1_0_0-cavs-1.0.2p-150000.3.79.1
Upgrade
Upgrade suse/libopenssl to a version that resolves this vulnerability.
Fixed in 1_0_0-devel-1.0.2p-150000.3.79.1
Upgrade
Upgrade suse/openssl to a version that resolves this vulnerability.
Fixed in 1_0_0-1.0.2p-150000.3.79.1
Upgrade
Upgrade suse/libopenssl to a version that resolves this vulnerability.
Fixed in 1_0_0-devel-32bit-1.0.2p-150000.3.79.1
Upgrade
Upgrade suse/openssl to a version that resolves this vulnerability.
Fixed in 1_0_0-doc-1.0.2p-150000.3.79.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Legacy-15-SP4-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Legacy-15-SP5-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-2633=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-2633=1

Event History

Feb 27, 2024

Advisory Published

via SUSE·12:02 PM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-4304

Frequently Asked Questions

Which systems should be checked for this update?

Check systems running the listed SUSE openssl-1_0_0 packages, including suse/openssl, suse/libopenssl, suse/libopenssl10, and suse/libopenssl10-debuginfo, on openSUSE Leap 15.4 or 15.5 for the specified architectures.

What operational issue does this update address in addition to the timing side-channel fix?

It reworks the prior fix for the RSA decryption timing oracle because that earlier fix caused a severe 2–3x performance regression in typical use.

SUSE-SU-2023:2633-1: Security update for openssl-1_0_0

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems should be checked for this update?

What operational issue does this update address in addition to the timing side-channel fix?

Company

Resources

Contact