RHSA-2024:9333: Moderate: SUSE Liberty Linux Low: openssl and openssl-fips-provider security update

[Update Advisories for SUSE Liberty Linux]

# Low: openssl and openssl-fips-provider security update

Announcement ID: RHSA-2024:9333
Rating: Moderate
References:

  * bsc#2274020
  * bsc#2281029
  * bsc#2283757
  * bsc#2294581



Cross-References:

  * CVE-2024-2511
  * CVE-2024-4603
  * CVE-2024-4741
  * CVE-2024-5535



CVSS scores:

  * CVE-2024-2511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-4603 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
  * CVE-2024-4741 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-5535 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

  * SUSE Liberty Linux 9


An update that solves 4 vulnerabilities and has 4 bug fixes can now be installed.

## Description:

This security update provides a functional equivalent of RHSA-2024:9333. The original RedHat(R) advisory is available from the RedHat web site at https://access.redhat.com/errata/RHSA-2024:9333

## Package List:

  * SUSE Liberty Linux 9:
    * openssl 3.2.2-6.el9_5
    * openssl-devel 3.2.2-6.el9_5
    * openssl-fips-provider 3.0.7-6.el9_5
    * openssl-fips-provider-so 3.0.7-6.el9_5
    * openssl-libs 3.2.2-6.el9_5
    * openssl-perl 3.2.2-6.el9_5

## References:

  * https://www.suse.com/security/cve/CVE-2024-2511.html
  * https://www.suse.com/security/cve/CVE-2024-4603.html
  * https://www.suse.com/security/cve/CVE-2024-4741.html
  * https://www.suse.com/security/cve/CVE-2024-5535.html