[ELSA-2021-9478] openssl security update
Severity
Important
Affected Packages
5
CVEs
2
[1.0.2k-22]
- fix CVE-2021-23841 openssl: NULL pointer dereference
in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126
| Package | Affected Version |
|---|---|
 pkg:rpm/oraclelinux/openssl?distro=oraclelinux-7.9
|
< 1.0.2k-22.ksplice1.el7_9 |
|
pkg:rpm/oraclelinux/openssl-static?distro=oraclelinux-7.9
|
< 1.0.2k-22.ksplice1.el7_9 |
|
pkg:rpm/oraclelinux/openssl-perl?distro=oraclelinux-7.9
|
< 1.0.2k-22.ksplice1.el7_9 |
|
pkg:rpm/oraclelinux/openssl-libs?distro=oraclelinux-7.9
|
< 1.0.2k-22.ksplice1.el7_9 |
|
pkg:rpm/oraclelinux/openssl-devel?distro=oraclelinux-7.9
|
< 1.0.2k-22.ksplice1.el7_9 |
- ID
- ELSA-2021-9478
- Severity
- important
- URL
- https://linux.oracle.com/errata/ELSA-2021-9478.html
- Published
-
2021-10-13T00:00:00
(2 years ago) - Modified
-
2021-10-13T00:00:00
(2 years ago) - Rights
- Copyright 2021 Oracle, Inc.
- Other Advisories
-
-
ALAS-2021-1482
-
ALAS2-2021-1608
-
ALAS2-2021-1612
-
ALAS2-2024-2502
-
ALPINE:CVE-2021-23840
-
ALPINE:CVE-2021-23841
-
ALSA-2021:4198
-
ALSA-2021:4424
-
ASA-202102-42
-
DSA-4855-1
-
ELSA-2021-3798
-
ELSA-2021-4424
-
ELSA-2021-9528
-
ELSA-2021-9561
-
FREEBSD:2F3CD69E-7DEE-11EB-B92E-0022489AD614
-
FREEBSD:56BA4513-A1BE-11EB-9072-D4C9EF517024
-
FREEBSD:96A21236-707B-11EB-96D8-D4C9EF517024
-
GLSA-202103-03
-
openSUSE-SU-2021:0357-1
-
openSUSE-SU-2021:0372-1
-
openSUSE-SU-2021:0427-1
-
openSUSE-SU-2021:0430-1
-
RHSA-2021:3798
-
RHSA-2021:4198
-
RHSA-2021:4424
-
RUSTSEC-2021-0057
-
RUSTSEC-2021-0058
-
SECADV-20210216-1
-
SECADV-20210216-3
-
SUSE-SU-2021:0649-1
-
SUSE-SU-2021:0651-1
-
SUSE-SU-2021:0673-1
-
SUSE-SU-2021:0674-1
-
SUSE-SU-2021:0725-1
-
SUSE-SU-2021:0752-1
-
SUSE-SU-2021:0753-1
-
SUSE-SU-2021:0754-1
-
SUSE-SU-2021:0755-1
-
SUSE-SU-2021:0769-1
-
SUSE-SU-2021:0793-1
-
SUSE-SU-2021:0939-1
-
USN-4738-1
-
USN-4745-1
-
USN-5088-1
-
USN-7018-1
-
| Source | # ID | Name | URL |
|---|---|---|---|
| elsa | ELSA-2021-9478 |
|
|
| CVE | CVE-2021-23840 |
|
|
| CVE | CVE-2021-23841 |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/oraclelinux/openssl?distro=oraclelinux-7.9 | oraclelinux |
openssl
|
< 1.0.2k-22.ksplice1.el7_9 | oraclelinux-7.9 | ||
| Affected | pkg:rpm/oraclelinux/openssl-static?distro=oraclelinux-7.9 | oraclelinux |
openssl-static
|
< 1.0.2k-22.ksplice1.el7_9 | oraclelinux-7.9 | ||
| Affected | pkg:rpm/oraclelinux/openssl-perl?distro=oraclelinux-7.9 | oraclelinux |
openssl-perl
|
< 1.0.2k-22.ksplice1.el7_9 | oraclelinux-7.9 | ||
| Affected | pkg:rpm/oraclelinux/openssl-libs?distro=oraclelinux-7.9 | oraclelinux |
openssl-libs
|
< 1.0.2k-22.ksplice1.el7_9 | oraclelinux-7.9 | ||
| Affected | pkg:rpm/oraclelinux/openssl-devel?distro=oraclelinux-7.9 | oraclelinux |
openssl-devel
|
< 1.0.2k-22.ksplice1.el7_9 | oraclelinux-7.9 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |