Security update for openssl-ibmca SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:2046-1 Final 1 1 2023-04-26T15:31:27Z current 2023-04-26T15:31:27Z 2023-04-26T15:31:27Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openssl-ibmca This update for openssl-ibmca fixes the following issues: Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058) - Provider: Adjustments for OpenSSL versions 3.1 and 3.2 - Provider: Support RSA blinding - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding - Provider: Support 'implicit rejection' option for RSA PKCS#1 v1.5 padding - Provider: Adjustments in OpenSSL config generator and example configs - Engine: EC: Cache ICA key in EC_KEY object (performance improvement) - FIPS 140-3: Correct engine handling so only the ciphers selected in the config file are activated (bsc#1210359) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-2046,SUSE-SLE-Micro-5.4-2023-2046,SUSE-SLE-Module-Server-Applications-15-SP4-2023-2046,openSUSE-SLE-15.4-2023-2046 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20232046-1/ Link for SUSE-SU-2023:2046-1 https://lists.suse.com/pipermail/sle-security-updates/2023-April/014594.html E-Mail link for SUSE-SU-2023:2046-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1210058 SUSE Bug 1210058 https://bugzilla.suse.com/1210359 SUSE Bug 1210359 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Module for Server Applications 15 SP4 openSUSE Leap 15.4 openssl-ibmca-2.4.0-150400.4.8.1 openssl-ibmca-2.4.0-150400.4.8.1 as a component of SUSE Linux Enterprise Micro 5.4 openssl-ibmca-2.4.0-150400.4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 openssl-ibmca-2.4.0-150400.4.8.1 as a component of openSUSE Leap 15.4