Lucene search

K
oraclelinuxOracleLinuxELSA-2024-12675
HistorySep 19, 2024 - 12:00 a.m.

openssl security update

2024-09-1900:00:00
linux.oracle.com
12
openssl
security update
fips
branding patches
cve-2024-6119 fix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.6

Confidence

Low

[3.0.7-28.0.1_fips]

  • Replace upstream references in fips man pages [Orabug: 35824276]
  • Add FIPS package change: add fips suffix to Release and
    set Epoch to 10 [Orabug: 35824276]
  • Update FIPS module name and remove upstream references from
    fips_module_indicators manpage [Orabug: 35824276]
    [3.0.7-28.0.1]
  • Drop OpenELA branding, apply Oracle branding patches
  • Enable openssl-fips-provider dependency [Orabug: 36504822]
  • Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
  • Replace upstream references [Orabug: 34340177]
    [1:3.0.7-28]
  • Patch for CVE-2024-6119
    Resolves: RHEL-55340

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.6

Confidence

Low