Overview

Request 1094356 accepted

- Improve cross-package provides/conflicts [boo#1210313]
* Remove Conflicts: ssl
* Add Conflicts: openssl(cli)

- Security Fix: [bsc#1207534, CVE-2022-4304]
* Reworked the Fix for the Timing Oracle in RSA Decryption
The previous fix for this timing side channel turned out to cause
a severe 2-3x performance regression in the typical use case
compared to 1.1.1s.
* Reworked openssl-CVE-2022-4304.patch
* Refreshed patches:
- openssl-CVE-2023-0286.patch
- openssl-CVE-2023-0464.patch
- openssl-CVE-2023-0465.patch

Request History
Otto Hollmann's avatar

ohollmann created request

- Improve cross-package provides/conflicts [boo#1210313]
* Remove Conflicts: ssl
* Add Conflicts: openssl(cli)

- Security Fix: [bsc#1207534, CVE-2022-4304]
* Reworked the Fix for the Timing Oracle in RSA Decryption
The previous fix for this timing side channel turned out to cause
a severe 2-3x performance regression in the typical use case
compared to 1.1.1s.
* Reworked openssl-CVE-2022-4304.patch
* Refreshed patches:
- openssl-CVE-2023-0286.patch
- openssl-CVE-2023-0464.patch
- openssl-CVE-2023-0465.patch


Otto Hollmann's avatar

ohollmann accepted request

ok

openSUSE Build Service is sponsored by