1. Home
  2. Security Advisories
  3. Red Hat
  4. RHSA-2020:5476

[RHSA-2020:5476] openssl security and bug fix update

Severity Important
Affected Packages 18
CVEs 1
Info Packages References Vulnerabilities

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Reject certificates with explicit EC parameters in strict mode (BZ#1891541)

  • Add FIPS selftest for HKDF, SSKDF, SSHKDF, and TLS12PRF; add DH_compute_key KAT to DH selftest (BZ#1891542)

Package Affected Version
pkg:rpm/redhat/openssl?arch=x86_64&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl?arch=s390x&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl?arch=ppc64le&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl?arch=aarch64&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-perl?arch=x86_64&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-perl?arch=s390x&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-perl?arch=ppc64le&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-perl?arch=aarch64&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-libs?arch=x86_64&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-libs?arch=s390x&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-libs?arch=ppc64le&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-libs?arch=i686&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-libs?arch=aarch64&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-devel?arch=x86_64&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-devel?arch=s390x&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-devel?arch=ppc64le&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-devel?arch=i686&distro=redhat-8.3 < 1.1.1g-12.el8_3
pkg:rpm/redhat/openssl-devel?arch=aarch64&distro=redhat-8.3 < 1.1.1g-12.el8_3
ID
RHSA-2020:5476
Severity
important
URL
https://access.redhat.com/errata/RHSA-2020:5476
Published
2020-12-15T00:00:00
(3 years ago)
Modified
2020-12-15T00:00:00
(3 years ago)
Rights
Copyright 2020 Red Hat, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/redhat/openssl?arch=x86_64&distro=redhat-8.3 redhat openssl < 1.1.1g-12.el8_3 redhat-8.3 x86_64
Affected pkg:rpm/redhat/openssl?arch=s390x&distro=redhat-8.3 redhat openssl < 1.1.1g-12.el8_3 redhat-8.3 s390x
Affected pkg:rpm/redhat/openssl?arch=ppc64le&distro=redhat-8.3 redhat openssl < 1.1.1g-12.el8_3 redhat-8.3 ppc64le
Affected pkg:rpm/redhat/openssl?arch=aarch64&distro=redhat-8.3 redhat openssl < 1.1.1g-12.el8_3 redhat-8.3 aarch64
Affected pkg:rpm/redhat/openssl-perl?arch=x86_64&distro=redhat-8.3 redhat openssl-perl < 1.1.1g-12.el8_3 redhat-8.3 x86_64
Affected pkg:rpm/redhat/openssl-perl?arch=s390x&distro=redhat-8.3 redhat openssl-perl < 1.1.1g-12.el8_3 redhat-8.3 s390x
Affected pkg:rpm/redhat/openssl-perl?arch=ppc64le&distro=redhat-8.3 redhat openssl-perl < 1.1.1g-12.el8_3 redhat-8.3 ppc64le
Affected pkg:rpm/redhat/openssl-perl?arch=aarch64&distro=redhat-8.3 redhat openssl-perl < 1.1.1g-12.el8_3 redhat-8.3 aarch64
Affected pkg:rpm/redhat/openssl-libs?arch=x86_64&distro=redhat-8.3 redhat openssl-libs < 1.1.1g-12.el8_3 redhat-8.3 x86_64
Affected pkg:rpm/redhat/openssl-libs?arch=s390x&distro=redhat-8.3 redhat openssl-libs < 1.1.1g-12.el8_3 redhat-8.3 s390x
Affected pkg:rpm/redhat/openssl-libs?arch=ppc64le&distro=redhat-8.3 redhat openssl-libs < 1.1.1g-12.el8_3 redhat-8.3 ppc64le
Affected pkg:rpm/redhat/openssl-libs?arch=i686&distro=redhat-8.3 redhat openssl-libs < 1.1.1g-12.el8_3 redhat-8.3 i686
Affected pkg:rpm/redhat/openssl-libs?arch=aarch64&distro=redhat-8.3 redhat openssl-libs < 1.1.1g-12.el8_3 redhat-8.3 aarch64
Affected pkg:rpm/redhat/openssl-devel?arch=x86_64&distro=redhat-8.3 redhat openssl-devel < 1.1.1g-12.el8_3 redhat-8.3 x86_64
Affected pkg:rpm/redhat/openssl-devel?arch=s390x&distro=redhat-8.3 redhat openssl-devel < 1.1.1g-12.el8_3 redhat-8.3 s390x
Affected pkg:rpm/redhat/openssl-devel?arch=ppc64le&distro=redhat-8.3 redhat openssl-devel < 1.1.1g-12.el8_3 redhat-8.3 ppc64le
Affected pkg:rpm/redhat/openssl-devel?arch=i686&distro=redhat-8.3 redhat openssl-devel < 1.1.1g-12.el8_3 redhat-8.3 i686
Affected pkg:rpm/redhat/openssl-devel?arch=aarch64&distro=redhat-8.3 redhat openssl-devel < 1.1.1g-12.el8_3 redhat-8.3 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date