[ELSA-2021-9151] openssl security update
Severity
Important
Affected Packages
6
CVEs
2
[1.1.1g-15]
- version bump
[1.1.1g-14]
- CVE-2021-3450 openssl: CA certificate check
bypass with X509_V_FLAG_X509_STRICT
[1.1.1g-13]
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing
| Package | Affected Version |
|---|---|
 pkg:rpm/oraclelinux/openssl?distro=oraclelinux-8.3
|
< 1.1.1g-15.ksplice1.el8_3 |
|
pkg:rpm/oraclelinux/openssl-static?distro=oraclelinux-8.3
|
< 1.1.1g-15.ksplice1.el8_3 |
|
pkg:rpm/oraclelinux/openssl-perl?distro=oraclelinux-8.3
|
< 1.1.1g-15.ksplice1.el8_3 |
|
pkg:rpm/oraclelinux/openssl-libs?distro=oraclelinux-8.3
|
< 1.1.1g-15.ksplice1.el8_3 |
|
pkg:rpm/oraclelinux/openssl-devel?distro=oraclelinux-8.3
|
< 1.1.1g-15.ksplice1.el8_3 |
|
pkg:rpm/oraclelinux/openssl-debugsource?distro=oraclelinux-8.3
|
< 1.1.1g-15.ksplice1.el8_3 |
- ID
- ELSA-2021-9151
- Severity
- important
- URL
- https://linux.oracle.com/errata/ELSA-2021-9151.html
- Published
-
2021-04-01T00:00:00
(3 years ago) - Modified
-
2021-04-01T00:00:00
(3 years ago) - Rights
- Copyright 2021 Oracle, Inc.
- Other Advisories
-
-
ALAS2-2021-1622
-
ALAS2-2024-2502
-
ALPINE:CVE-2021-3449
-
ALPINE:CVE-2021-3450
-
ALSA-2021:1024
-
ASA-202103-10
-
CISCO-SA-OPENSSL-2021-GHY28DJD
-
DSA-4875-1
-
ELSA-2021-1024
-
FEDORA-2021-cbf14ab8f9
-
FREEBSD:38A4A043-E937-11EB-9B84-D4C9EF517024
-
FREEBSD:56BA4513-A1BE-11EB-9072-D4C9EF517024
-
FREEBSD:5A668AB3-8D86-11EB-B8D6-D4C9EF517024
-
FREEBSD:C0C1834C-9761-11EB-ACFD-0022489AD614
-
GLSA-202103-03
-
MS:CVE-2021-3449
-
MS:CVE-2021-3450
-
openSUSE-SU-2021:0476-1
-
openSUSE-SU-2021:1059-1
-
openSUSE-SU-2021:1061-1
-
openSUSE-SU-2021:2327-1
-
openSUSE-SU-2021:2353-1
-
RHSA-2021:1024
-
RUSTSEC-2021-0055
-
RUSTSEC-2021-0056
-
SECADV-20210325-1
-
SECADV-20210325-2
-
SUSE-SU-2021:0954-1
-
SUSE-SU-2021:0955-1
-
SUSE-SU-2021:0955-2
-
SUSE-SU-2021:2323-1
-
SUSE-SU-2021:2326-1
-
SUSE-SU-2021:2327-1
-
SUSE-SU-2021:2353-1
-
USN-4891-1
-
USN-5038-1
-
| Source | # ID | Name | URL |
|---|---|---|---|
| elsa | ELSA-2021-9151 |
|
|
| CVE | CVE-2021-3449 |
|
|
| CVE | CVE-2021-3450 |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/oraclelinux/openssl?distro=oraclelinux-8.3 | oraclelinux |
openssl
|
< 1.1.1g-15.ksplice1.el8_3 | oraclelinux-8.3 | ||
| Affected | pkg:rpm/oraclelinux/openssl-static?distro=oraclelinux-8.3 | oraclelinux |
openssl-static
|
< 1.1.1g-15.ksplice1.el8_3 | oraclelinux-8.3 | ||
| Affected | pkg:rpm/oraclelinux/openssl-perl?distro=oraclelinux-8.3 | oraclelinux |
openssl-perl
|
< 1.1.1g-15.ksplice1.el8_3 | oraclelinux-8.3 | ||
| Affected | pkg:rpm/oraclelinux/openssl-libs?distro=oraclelinux-8.3 | oraclelinux |
openssl-libs
|
< 1.1.1g-15.ksplice1.el8_3 | oraclelinux-8.3 | ||
| Affected | pkg:rpm/oraclelinux/openssl-devel?distro=oraclelinux-8.3 | oraclelinux |
openssl-devel
|
< 1.1.1g-15.ksplice1.el8_3 | oraclelinux-8.3 | ||
| Affected | pkg:rpm/oraclelinux/openssl-debugsource?distro=oraclelinux-8.3 | oraclelinux |
openssl-debugsource
|
< 1.1.1g-15.ksplice1.el8_3 | oraclelinux-8.3 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |