Security update for openssl-1_1 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3291-1 Final 1 1 2023-08-11T10:51:43Z current 2023-08-11T10:51:43Z 2023-08-11T10:51:43Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openssl-1_1 This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container ses/7.1/ceph/grafana:latest-2023-3291,Container ses/7.1/ceph/haproxy:latest-2023-3291,Container ses/7.1/ceph/keepalived:latest-2023-3291,Container ses/7.1/ceph/prometheus-alertmanager:latest-2023-3291,Container ses/7.1/ceph/prometheus-node-exporter:latest-2023-3291,Container ses/7.1/ceph/prometheus-server:latest-2023-3291,Container ses/7.1/ceph/prometheus-snmp_notifier:latest-2023-3291,Container ses/7.1/cephcsi/cephcsi:latest-2023-3291,Container ses/7.1/cephcsi/csi-attacher:v4.1.0-2023-3291,Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0-2023-3291,Container ses/7.1/cephcsi/csi-provisioner:v3.4.0-2023-3291,Container ses/7.1/cephcsi/csi-resizer:v1.7.0-2023-3291,Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1-2023-3291,Container ses/7.1/rook/ceph:latest-2023-3291,Container suse/sle-micro-rancher/5.2:latest-2023-3291,Container suse/sle-micro/5.1/toolbox:latest-2023-3291,Container suse/sle-micro/5.2/toolbox:latest-2023-3291,Container suse/sle15:15.2-2023-3291,Container suse/sle15:15.3-2023-3291,Container trento/trento-wanda:latest-2023-3291,Container trento/trento-web:latest-2023-3291,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2023-3291,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2023-3291,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2023-3291,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2023-3291,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2023-3291,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2023-3291,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2023-3291,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2023-3291,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2023-3291,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2023-3291,SUSE-2023-3291,SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3291,SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3291,SUSE-SUSE-MicroOS-5.1-2023-3291,SUSE-SUSE-MicroOS-5.2-2023-3291 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233291-1/ Link for SUSE-SU-2023:3291-1 https://lists.suse.com/pipermail/sle-security-updates/2023-August/015877.html E-Mail link for SUSE-SU-2023:3291-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1213517 SUSE Bug 1213517 https://bugzilla.suse.com/1213853 SUSE Bug 1213853 https://www.suse.com/security/cve/CVE-2023-3817/ SUSE CVE CVE-2023-3817 page Container ses/7.1/ceph/grafana:latest Container ses/7.1/ceph/haproxy:latest Container ses/7.1/ceph/keepalived:latest Container ses/7.1/ceph/prometheus-alertmanager:latest Container ses/7.1/ceph/prometheus-node-exporter:latest Container ses/7.1/ceph/prometheus-server:latest Container ses/7.1/ceph/prometheus-snmp_notifier:latest Container ses/7.1/cephcsi/cephcsi:latest Container ses/7.1/cephcsi/csi-attacher:v4.1.0 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 Container ses/7.1/cephcsi/csi-resizer:v1.7.0 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 Container ses/7.1/rook/ceph:latest Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Container suse/sle15:15.2 Container suse/sle15:15.3 Container trento/trento-wanda:latest Container trento/trento-web:latest Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 libopenssl1_1-1.1.1d-150200.11.75.1 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 openssl-1_1-1.1.1d-150200.11.75.1 libopenssl1_1-32bit-1.1.1d-150200.11.75.1 libopenssl-1_1-devel-1.1.1d-150200.11.75.1 libopenssl-1_1-devel-32bit-1.1.1d-150200.11.75.1 libopenssl-1_1-devel-64bit-1.1.1d-150200.11.75.1 libopenssl1_1-64bit-1.1.1d-150200.11.75.1 libopenssl1_1-hmac-32bit-1.1.1d-150200.11.75.1 libopenssl1_1-hmac-64bit-1.1.1d-150200.11.75.1 openssl-1_1-doc-1.1.1d-150200.11.75.1 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/grafana:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/grafana:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/grafana:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/haproxy:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/haproxy:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/haproxy:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/keepalived:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/keepalived:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/keepalived:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-server:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-server:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-server:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/rook/ceph:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/rook/ceph:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container ses/7.1/rook/ceph:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle-micro-rancher/5.2:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle-micro-rancher/5.2:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle-micro/5.1/toolbox:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container suse/sle-micro/5.1/toolbox:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle-micro/5.1/toolbox:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle-micro/5.2/toolbox:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container suse/sle-micro/5.2/toolbox:latest openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle-micro/5.2/toolbox:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle15:15.2 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container suse/sle15:15.2 openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle15:15.2 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle15:15.3 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container suse/sle15:15.3 openssl-1_1-1.1.1d-150200.11.75.1 as a component of Container suse/sle15:15.3 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container trento/trento-wanda:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container trento/trento-wanda:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Container trento/trento-web:latest libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of Container trento/trento-web:latest libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libopenssl1_1-32bit-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libopenssl1_1-32bit-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libopenssl1_1-32bit-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libopenssl1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libopenssl1_1-32bit-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production openssl-1_1-1.1.1d-150200.11.75.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libopenssl-1_1-devel-1.1.1d-150200.11.75.1 as a component of SUSE Linux Enterprise Micro 5.1 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of SUSE Linux Enterprise Micro 5.1 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of SUSE Linux Enterprise Micro 5.1 openssl-1_1-1.1.1d-150200.11.75.1 as a component of SUSE Linux Enterprise Micro 5.1 libopenssl-1_1-devel-1.1.1d-150200.11.75.1 as a component of SUSE Linux Enterprise Micro 5.2 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of SUSE Linux Enterprise Micro 5.2 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of SUSE Linux Enterprise Micro 5.2 openssl-1_1-1.1.1d-150200.11.75.1 as a component of SUSE Linux Enterprise Micro 5.2 libopenssl-1_1-devel-1.1.1d-150200.11.75.1 as a component of SUSE Manager Proxy 4.2 libopenssl-1_1-devel-32bit-1.1.1d-150200.11.75.1 as a component of SUSE Manager Proxy 4.2 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of SUSE Manager Proxy 4.2 libopenssl1_1-32bit-1.1.1d-150200.11.75.1 as a component of SUSE Manager Proxy 4.2 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of SUSE Manager Proxy 4.2 libopenssl1_1-hmac-32bit-1.1.1d-150200.11.75.1 as a component of SUSE Manager Proxy 4.2 openssl-1_1-1.1.1d-150200.11.75.1 as a component of SUSE Manager Proxy 4.2 libopenssl-1_1-devel-1.1.1d-150200.11.75.1 as a component of SUSE Manager Server 4.2 libopenssl-1_1-devel-32bit-1.1.1d-150200.11.75.1 as a component of SUSE Manager Server 4.2 libopenssl1_1-1.1.1d-150200.11.75.1 as a component of SUSE Manager Server 4.2 libopenssl1_1-32bit-1.1.1d-150200.11.75.1 as a component of SUSE Manager Server 4.2 libopenssl1_1-hmac-1.1.1d-150200.11.75.1 as a component of SUSE Manager Server 4.2 libopenssl1_1-hmac-32bit-1.1.1d-150200.11.75.1 as a component of SUSE Manager Server 4.2 openssl-1_1-1.1.1d-150200.11.75.1 as a component of SUSE Manager Server 4.2 Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the "-check" option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue. CVE-2023-3817 Container ses/7.1/ceph/grafana:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/grafana:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/grafana:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/haproxy:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/haproxy:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/haproxy:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/keepalived:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/keepalived:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/keepalived:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-alertmanager:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-alertmanager:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-alertmanager:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-node-exporter:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-node-exporter:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-node-exporter:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-server:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-server:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-server:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-snmp_notifier:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-snmp_notifier:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/ceph/prometheus-snmp_notifier:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/cephcsi:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/cephcsi:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/cephcsi:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-attacher:v4.1.0:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-attacher:v4.1.0:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-attacher:v4.1.0:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-resizer:v1.7.0:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-resizer:v1.7.0:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-resizer:v1.7.0:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1:openssl-1_1-1.1.1d-150200.11.75.1 Container ses/7.1/rook/ceph:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container ses/7.1/rook/ceph:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container ses/7.1/rook/ceph:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container suse/sle-micro-rancher/5.2:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container suse/sle-micro-rancher/5.2:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container suse/sle-micro/5.1/toolbox:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container suse/sle-micro/5.1/toolbox:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container suse/sle-micro/5.1/toolbox:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container suse/sle-micro/5.2/toolbox:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container suse/sle-micro/5.2/toolbox:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container suse/sle-micro/5.2/toolbox:latest:openssl-1_1-1.1.1d-150200.11.75.1 Container suse/sle15:15.2:libopenssl1_1-1.1.1d-150200.11.75.1 Container suse/sle15:15.2:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container suse/sle15:15.2:openssl-1_1-1.1.1d-150200.11.75.1 Container suse/sle15:15.3:libopenssl1_1-1.1.1d-150200.11.75.1 Container suse/sle15:15.3:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container suse/sle15:15.3:openssl-1_1-1.1.1d-150200.11.75.1 Container trento/trento-wanda:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container trento/trento-wanda:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Container trento/trento-web:latest:libopenssl1_1-1.1.1d-150200.11.75.1 Container trento/trento-web:latest:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libopenssl1_1-32bit-1.1.1d-150200.11.75.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:openssl-1_1-1.1.1d-150200.11.75.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libopenssl1_1-32bit-1.1.1d-150200.11.75.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:openssl-1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:openssl-1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:openssl-1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:openssl-1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:openssl-1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:openssl-1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:openssl-1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libopenssl1_1-32bit-1.1.1d-150200.11.75.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:openssl-1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libopenssl1_1-1.1.1d-150200.11.75.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libopenssl1_1-32bit-1.1.1d-150200.11.75.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:openssl-1_1-1.1.1d-150200.11.75.1 SUSE Linux Enterprise Micro 5.1:libopenssl-1_1-devel-1.1.1d-150200.11.75.1 SUSE Linux Enterprise Micro 5.1:libopenssl1_1-1.1.1d-150200.11.75.1 SUSE Linux Enterprise Micro 5.1:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 SUSE Linux Enterprise Micro 5.1:openssl-1_1-1.1.1d-150200.11.75.1 SUSE Linux Enterprise Micro 5.2:libopenssl-1_1-devel-1.1.1d-150200.11.75.1 SUSE Linux Enterprise Micro 5.2:libopenssl1_1-1.1.1d-150200.11.75.1 SUSE Linux Enterprise Micro 5.2:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 SUSE Linux Enterprise Micro 5.2:openssl-1_1-1.1.1d-150200.11.75.1 SUSE Manager Proxy 4.2:libopenssl-1_1-devel-1.1.1d-150200.11.75.1 SUSE Manager Proxy 4.2:libopenssl-1_1-devel-32bit-1.1.1d-150200.11.75.1 SUSE Manager Proxy 4.2:libopenssl1_1-1.1.1d-150200.11.75.1 SUSE Manager Proxy 4.2:libopenssl1_1-32bit-1.1.1d-150200.11.75.1 SUSE Manager Proxy 4.2:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 SUSE Manager Proxy 4.2:libopenssl1_1-hmac-32bit-1.1.1d-150200.11.75.1 SUSE Manager Proxy 4.2:openssl-1_1-1.1.1d-150200.11.75.1 SUSE Manager Server 4.2:libopenssl-1_1-devel-1.1.1d-150200.11.75.1 SUSE Manager Server 4.2:libopenssl-1_1-devel-32bit-1.1.1d-150200.11.75.1 SUSE Manager Server 4.2:libopenssl1_1-1.1.1d-150200.11.75.1 SUSE Manager Server 4.2:libopenssl1_1-32bit-1.1.1d-150200.11.75.1 SUSE Manager Server 4.2:libopenssl1_1-hmac-1.1.1d-150200.11.75.1 SUSE Manager Server 4.2:libopenssl1_1-hmac-32bit-1.1.1d-150200.11.75.1 SUSE Manager Server 4.2:openssl-1_1-1.1.1d-150200.11.75.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233291-1/ https://www.suse.com/security/cve/CVE-2023-3817.html CVE-2023-3817 https://bugzilla.suse.com/1213853 SUSE Bug 1213853