1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2021-1024

[ELSA-2021-1024] openssl security update

Severity Important
Affected Packages 4
CVEs 2
Info Packages References Vulnerabilities

[1.1.1g-15]
- version bump

[1.1.1g-14]
- CVE-2021-3450 openssl: CA certificate check
bypass with X509_V_FLAG_X509_STRICT

[1.1.1g-13]
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing

Package Affected Version
pkg:rpm/oraclelinux/openssl?distro=oraclelinux-8.3 < 1.1.1g-15.el8_3
pkg:rpm/oraclelinux/openssl-perl?distro=oraclelinux-8.3 < 1.1.1g-15.el8_3
pkg:rpm/oraclelinux/openssl-libs?distro=oraclelinux-8.3 < 1.1.1g-15.el8_3
pkg:rpm/oraclelinux/openssl-devel?distro=oraclelinux-8.3 < 1.1.1g-15.el8_3
ID
ELSA-2021-1024
Severity
important
URL
https://linux.oracle.com/errata/ELSA-2021-1024.html
Published
2021-03-29T00:00:00
(3 years ago)
Modified
2021-03-29T00:00:00
(3 years ago)
Rights
Copyright 2021 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/openssl?distro=oraclelinux-8.3 oraclelinux openssl < 1.1.1g-15.el8_3 oraclelinux-8.3
Affected pkg:rpm/oraclelinux/openssl-perl?distro=oraclelinux-8.3 oraclelinux openssl-perl < 1.1.1g-15.el8_3 oraclelinux-8.3
Affected pkg:rpm/oraclelinux/openssl-libs?distro=oraclelinux-8.3 oraclelinux openssl-libs < 1.1.1g-15.el8_3 oraclelinux-8.3
Affected pkg:rpm/oraclelinux/openssl-devel?distro=oraclelinux-8.3 oraclelinux openssl-devel < 1.1.1g-15.el8_3 oraclelinux-8.3
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date