p PatchFirst

SUSE-SU-2025:21213-1

SUSE-SU-2025:21213-1 · Security update for openssl-3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232) - CVE-2025-9231: Fixedk timing side-channel in SM2 algorithm on 64 bit ARM (bsc#1250233) - CVE-2025-9232: Fixed out-of-bounds read in HTTP client no_proxy handling (bsc#1250234)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • openssl-3 SUSE:Linux Enterprise Server 16.0

    Affected ranges
    • ECOSYSTEM: < 3.5.0-160000.4.1

    Update to 3.5.0-160000.4.1

  • openssl-3 SUSE:Linux Enterprise Server for SAP applications 16.0

    Affected ranges
    • ECOSYSTEM: < 3.5.0-160000.4.1

    Update to 3.5.0-160000.4.1

Original sources

Check your server →