SUSE-SU-2023:2046-1
Security update for openssl-ibmca
SUSE-SU-2023:2046-1 is a vulnerability with no CVSS score yet in openssl-ibmca, published April 26, 2023. No source lists public exploit code. Fixed in openssl-ibmca 2.4.0-150400.4.8.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.4.0-150400.4.8.1openssl-ibmca +2 more
Description
This update for openssl-ibmca fixes the following issues:
Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
Provider: Adjustments for OpenSSL versions 3.1 and 3.2
Provider: Support RSA blinding
Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
Provider: Support 'implicit rejection' option for RSA PKCS#1 v1.5 padding
Provider: Adjustments in OpenSSL config generator and example configs
Engine: EC: Cache ICA key in EC_KEY object (performance improvement)
FIPS 140-3: Correct engine handling so only the ciphers selected in the config file are activated (bsc#1210359)
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openssl-ibmcaSUSE:Linux Enterprise Micro 5.4 | before 2.4.0-150400.4.8.1 | 2.4.0-150400.4.8.1 |
openssl-ibmcaSUSE:Linux Enterprise Module for Server Applications 15 SP4 | before 2.4.0-150400.4.8.1 | 2.4.0-150400.4.8.1 |
openssl-ibmcaopenSUSE:Leap 15.4 | before 2.4.0-150400.4.8.1 | 2.4.0-150400.4.8.1 |
What each source reports
OSVNo score
Security update for openssl-ibmca
This update for openssl-ibmca fixes the following issues:
Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
Provider: Adjustments for OpenSSL versions 3.1 and 3.2
Provider: Support RSA blinding
Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
Provider: Support 'implicit rejection' option for RSA PKCS#1 v1.5 padding
Provider: Adjustments in OpenSSL config generator and example configs
Engine: EC: Cache ICA key in EC_KEY object (performance improvement)
FIPS 140-3: Correct engine handling so only the ciphers selected in the config file are activated (bsc#1210359)
- Record
SUSE-SU-2023:2046-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.