[ELSA-2024-12056] openssl security update

Severity Moderate

Affected Packages 5

CVEs 3

[1:1.1.1k-12]
- Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
(a proper fix for CVE-2020-25659)
Resolves: RHEL-17696

[1:1.1.1k-11]
- Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
excessively long X9.42 DH keys or parameters may be very slow
Resolves: RHEL-16538

[1:1.1.1k-10]
- Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
Resolves: RHEL-14245
- Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
Resolves: RHEL-14239

Package	Affected Version
pkg:rpm/oraclelinux/openssl?distro=oraclelinux-8.9	< 1.1.1k-12.ksplice1.el8_9
pkg:rpm/oraclelinux/openssl-static?distro=oraclelinux-8.9	< 1.1.1k-12.ksplice1.el8_9
pkg:rpm/oraclelinux/openssl-perl?distro=oraclelinux-8.9	< 1.1.1k-12.ksplice1.el8_9
pkg:rpm/oraclelinux/openssl-libs?distro=oraclelinux-8.9	< 1.1.1k-12.ksplice1.el8_9
pkg:rpm/oraclelinux/openssl-devel?distro=oraclelinux-8.9	< 1.1.1k-12.ksplice1.el8_9

ID

ELSA-2024-12056

Severity

moderate

URL

https://linux.oracle.com/errata/ELSA-2024-12056.html

Published

2024-01-10T00:00:00
(8 months ago)

Modified

2024-01-10T00:00:00
(8 months ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2024-12056	https://linux.oracle.com/errata/ELSA-2024-12056.html
CVE	CVE-2023-5678	https://linux.oracle.com/cve/CVE-2023-5678.html
CVE	CVE-2023-3446	https://linux.oracle.com/cve/CVE-2023-3446.html
CVE	CVE-2023-3817	https://linux.oracle.com/cve/CVE-2023-3817.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/oraclelinux/openssl?distro=oraclelinux-8.9	oraclelinux	openssl	< 1.1.1k-12.ksplice1.el8_9	oraclelinux-8.9
Affected	pkg:rpm/oraclelinux/openssl-static?distro=oraclelinux-8.9	oraclelinux	openssl-static	< 1.1.1k-12.ksplice1.el8_9	oraclelinux-8.9
Affected	pkg:rpm/oraclelinux/openssl-perl?distro=oraclelinux-8.9	oraclelinux	openssl-perl	< 1.1.1k-12.ksplice1.el8_9	oraclelinux-8.9
Affected	pkg:rpm/oraclelinux/openssl-libs?distro=oraclelinux-8.9	oraclelinux	openssl-libs	< 1.1.1k-12.ksplice1.el8_9	oraclelinux-8.9
Affected	pkg:rpm/oraclelinux/openssl-devel?distro=oraclelinux-8.9	oraclelinux	openssl-devel	< 1.1.1k-12.ksplice1.el8_9	oraclelinux-8.9

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date