Test ID:	1.3.6.1.4.1.25623.1.0.833420
Category:	openSUSE Local Security Checks
Title:	openSUSE Security Advisory (SUSE-SU-2024:0172-1)
Summary:	The remote host is missing an update for the 'openssl-3' package(s) announced via the SUSE-SU-2024:0172-1 advisory.
Description:	Summary: The remote host is missing an update for the 'openssl-3' package(s) announced via the SUSE-SU-2024:0172-1 advisory. Vulnerability Insight: This update for openssl-3 fixes the following issues: - CVE-2023-6129: Fixed vector register clobbering on PowerPC. (bsc#1218690) - CVE-2023-6237: Fixed excessive time spent checking invalid RSA public keys. (bsc#1218810) Affected Software/OS: 'openssl-3' package(s) on openSUSE Leap 15.5. Solution: Please install the updated package(s). CVSS Score: 6.1 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-6129 3.0.13 git commit https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 3.1.5 git commit https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 3.2.1 git commit https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 OpenSSL Advisory https://www.openssl.org/news/secadv/20240109.txt http://www.openwall.com/lists/oss-security/2024/03/11/1 Common Vulnerability Exposure (CVE) ID: CVE-2023-6237 https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294 https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d https://www.openssl.org/news/secadv/20240115.txt
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.