An update for libtommath is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP3,openEuler-22.03-LTS,openEuler-22.03-LTS-SP1 and openEuler-22.03-LTS-SP2 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2023-1625 Final 1.0 1.0 2023-09-11 Initial 2023-09-11 2023-09-11 openEuler SA Tool V1.0 2023-09-11 libtommath security update An update for libtommath is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP3,openEuler-22.03-LTS,openEuler-22.03-LTS-SP1 and openEuler-22.03-LTS-SP2. LibTomMath is a free open source portable number theoretic multiple-precision integer library written entirely in C. The library is designed to provide a simple to work with API that provides fairly efficient routines that build out of the box without configuration. Security Fix(es): Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).(CVE-2023-36328) An update for libtommath is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP3,openEuler-22.03-LTS,openEuler-22.03-LTS-SP1 and openEuler-22.03-LTS-SP2. openEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Critical libtommath https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1625 https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2023-36328 https://nvd.nist.gov/vuln/detail/CVE-2023-36328 openEuler-20.03-LTS-SP1 openEuler-20.03-LTS-SP3 openEuler-22.03-LTS openEuler-22.03-LTS-SP1 openEuler-22.03-LTS-SP2 libtommath-debugsource-1.1.0-4.oe1.aarch64.rpm libtommath-help-1.1.0-4.oe1.aarch64.rpm libtommath-debuginfo-1.1.0-4.oe1.aarch64.rpm libtommath-1.1.0-4.oe1.aarch64.rpm libtommath-devel-1.1.0-4.oe1.aarch64.rpm libtommath-devel-1.1.0-4.oe1.aarch64.rpm libtommath-debuginfo-1.1.0-4.oe1.aarch64.rpm libtommath-debugsource-1.1.0-4.oe1.aarch64.rpm libtommath-1.1.0-4.oe1.aarch64.rpm libtommath-help-1.1.0-4.oe1.aarch64.rpm libtommath-debuginfo-1.2.0-4.oe2203.aarch64.rpm libtommath-1.2.0-4.oe2203.aarch64.rpm libtommath-devel-1.2.0-4.oe2203.aarch64.rpm libtommath-debugsource-1.2.0-4.oe2203.aarch64.rpm libtommath-help-1.2.0-4.oe2203.aarch64.rpm libtommath-devel-1.2.0-4.oe2203sp1.aarch64.rpm libtommath-debugsource-1.2.0-4.oe2203sp1.aarch64.rpm libtommath-1.2.0-4.oe2203sp1.aarch64.rpm libtommath-help-1.2.0-4.oe2203sp1.aarch64.rpm libtommath-debuginfo-1.2.0-4.oe2203sp1.aarch64.rpm libtommath-debugsource-1.2.0-4.oe2203sp2.aarch64.rpm libtommath-help-1.2.0-4.oe2203sp2.aarch64.rpm libtommath-debuginfo-1.2.0-4.oe2203sp2.aarch64.rpm libtommath-devel-1.2.0-4.oe2203sp2.aarch64.rpm libtommath-1.2.0-4.oe2203sp2.aarch64.rpm libtommath-1.1.0-4.oe1.src.rpm libtommath-1.1.0-4.oe1.src.rpm libtommath-1.2.0-4.oe2203.src.rpm libtommath-1.2.0-4.oe2203sp1.src.rpm libtommath-1.2.0-4.oe2203sp2.src.rpm libtommath-devel-1.1.0-4.oe1.x86_64.rpm libtommath-debugsource-1.1.0-4.oe1.x86_64.rpm libtommath-debuginfo-1.1.0-4.oe1.x86_64.rpm libtommath-help-1.1.0-4.oe1.x86_64.rpm libtommath-1.1.0-4.oe1.x86_64.rpm libtommath-1.1.0-4.oe1.x86_64.rpm libtommath-help-1.1.0-4.oe1.x86_64.rpm libtommath-debugsource-1.1.0-4.oe1.x86_64.rpm libtommath-debuginfo-1.1.0-4.oe1.x86_64.rpm libtommath-devel-1.1.0-4.oe1.x86_64.rpm libtommath-help-1.2.0-4.oe2203.x86_64.rpm libtommath-1.2.0-4.oe2203.x86_64.rpm libtommath-debuginfo-1.2.0-4.oe2203.x86_64.rpm libtommath-devel-1.2.0-4.oe2203.x86_64.rpm libtommath-debugsource-1.2.0-4.oe2203.x86_64.rpm libtommath-debuginfo-1.2.0-4.oe2203sp1.x86_64.rpm libtommath-debugsource-1.2.0-4.oe2203sp1.x86_64.rpm libtommath-devel-1.2.0-4.oe2203sp1.x86_64.rpm libtommath-help-1.2.0-4.oe2203sp1.x86_64.rpm libtommath-1.2.0-4.oe2203sp1.x86_64.rpm libtommath-help-1.2.0-4.oe2203sp2.x86_64.rpm libtommath-1.2.0-4.oe2203sp2.x86_64.rpm libtommath-devel-1.2.0-4.oe2203sp2.x86_64.rpm libtommath-debuginfo-1.2.0-4.oe2203sp2.x86_64.rpm libtommath-debugsource-1.2.0-4.oe2203sp2.x86_64.rpm Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). 2023-09-11 CVE-2023-36328 openEuler-20.03-LTS-SP1 openEuler-20.03-LTS-SP3 openEuler-22.03-LTS openEuler-22.03-LTS-SP1 openEuler-22.03-LTS-SP2 Critical 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H libtommath security update 2023-09-11 https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1625