Lucene search

K
oraclelinuxOracleLinuxELSA-2024-6783
HistorySep 19, 2024 - 12:00 a.m.

openssl security update

2024-09-1900:00:00
linux.oracle.com

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

Low

[3.0.7-28.0.1]

  • Drop OpenELA branding, apply Oracle branding patches
  • Enable openssl-fips-provider dependency [Orabug: 36504822]
  • Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
  • Replace upstream references [Orabug: 34340177]
    [1:3.0.7-28]
  • Patch for CVE-2024-6119
    Resolves: RHEL-55340

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

Low