[RHSA-2023:7877] openssl security update

Severity Low
Affected Packages 18
CVEs 3

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

  • OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)

  • openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

ID
RHSA-2023:7877
Severity
low
URL
https://access.redhat.com/errata/RHSA-2023:7877
Published
2023-12-19T00:00:00
(9 months ago)
Modified
2023-12-19T00:00:00
(9 months ago)
Rights
Copyright 2023 Red Hat, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/redhat/openssl?arch=x86_64&distro=redhat-8.9 redhat openssl < 1.1.1k-12.el8_9 redhat-8.9 x86_64
Affected pkg:rpm/redhat/openssl?arch=s390x&distro=redhat-8.9 redhat openssl < 1.1.1k-12.el8_9 redhat-8.9 s390x
Affected pkg:rpm/redhat/openssl?arch=ppc64le&distro=redhat-8.9 redhat openssl < 1.1.1k-12.el8_9 redhat-8.9 ppc64le
Affected pkg:rpm/redhat/openssl?arch=aarch64&distro=redhat-8.9 redhat openssl < 1.1.1k-12.el8_9 redhat-8.9 aarch64
Affected pkg:rpm/redhat/openssl-perl?arch=x86_64&distro=redhat-8.9 redhat openssl-perl < 1.1.1k-12.el8_9 redhat-8.9 x86_64
Affected pkg:rpm/redhat/openssl-perl?arch=s390x&distro=redhat-8.9 redhat openssl-perl < 1.1.1k-12.el8_9 redhat-8.9 s390x
Affected pkg:rpm/redhat/openssl-perl?arch=ppc64le&distro=redhat-8.9 redhat openssl-perl < 1.1.1k-12.el8_9 redhat-8.9 ppc64le
Affected pkg:rpm/redhat/openssl-perl?arch=aarch64&distro=redhat-8.9 redhat openssl-perl < 1.1.1k-12.el8_9 redhat-8.9 aarch64
Affected pkg:rpm/redhat/openssl-libs?arch=x86_64&distro=redhat-8.9 redhat openssl-libs < 1.1.1k-12.el8_9 redhat-8.9 x86_64
Affected pkg:rpm/redhat/openssl-libs?arch=s390x&distro=redhat-8.9 redhat openssl-libs < 1.1.1k-12.el8_9 redhat-8.9 s390x
Affected pkg:rpm/redhat/openssl-libs?arch=ppc64le&distro=redhat-8.9 redhat openssl-libs < 1.1.1k-12.el8_9 redhat-8.9 ppc64le
Affected pkg:rpm/redhat/openssl-libs?arch=i686&distro=redhat-8.9 redhat openssl-libs < 1.1.1k-12.el8_9 redhat-8.9 i686
Affected pkg:rpm/redhat/openssl-libs?arch=aarch64&distro=redhat-8.9 redhat openssl-libs < 1.1.1k-12.el8_9 redhat-8.9 aarch64
Affected pkg:rpm/redhat/openssl-devel?arch=x86_64&distro=redhat-8.9 redhat openssl-devel < 1.1.1k-12.el8_9 redhat-8.9 x86_64
Affected pkg:rpm/redhat/openssl-devel?arch=s390x&distro=redhat-8.9 redhat openssl-devel < 1.1.1k-12.el8_9 redhat-8.9 s390x
Affected pkg:rpm/redhat/openssl-devel?arch=ppc64le&distro=redhat-8.9 redhat openssl-devel < 1.1.1k-12.el8_9 redhat-8.9 ppc64le
Affected pkg:rpm/redhat/openssl-devel?arch=i686&distro=redhat-8.9 redhat openssl-devel < 1.1.1k-12.el8_9 redhat-8.9 i686
Affected pkg:rpm/redhat/openssl-devel?arch=aarch64&distro=redhat-8.9 redhat openssl-devel < 1.1.1k-12.el8_9 redhat-8.9 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...