vulnerability

SUSE: CVE-2024-45341: SUSE Linux Security Advisory

Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Apr 11, 2025
Added
Dec 5, 2025
Modified
Dec 5, 2025

Description

A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.

Solutions

suse-upgrade-go1-22suse-upgrade-go1-22-docsuse-upgrade-go1-22-opensslsuse-upgrade-go1-22-openssl-docsuse-upgrade-go1-22-openssl-racesuse-upgrade-go1-22-racesuse-upgrade-go1-23suse-upgrade-go1-23-docsuse-upgrade-go1-23-opensslsuse-upgrade-go1-23-openssl-docsuse-upgrade-go1-23-openssl-racesuse-upgrade-go1-23-racesuse-upgrade-go1-24suse-upgrade-go1-24-docsuse-upgrade-go1-24-libstdsuse-upgrade-go1-24-opensslsuse-upgrade-go1-24-openssl-racesuse-upgrade-go1-24-racesuse-upgrade-govulncheck-vulndb
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.