VDB
SUSE-SU-2023%3A1911-1
SUSE-SU-2023%3A1911-1
PUBLISHED
CVSS 2 LOW
This update for openssl-1_1 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).
Risk Scores
CVSS 3.1
2
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| libopenssl1_1 | ||
| libopenssl | ||
| openssl |
Timeline
- Apr 19, 2023 CVE Published
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_1911-1.json advisory
- https://www.suse.com/support/update/announcement/2023/suse-su-20231911-1/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-April/014498.html advisory
- https://bugzilla.suse.com/1209873 advisory
- https://bugzilla.suse.com/1209878 advisory
- https://www.suse.com/security/cve/CVE-2023-0465/ advisory
- https://www.suse.com/security/cve/CVE-2023-0466/ advisory