Lucene search

RedHatRHSA-2024:0500

HistoryJan 25, 2024 - 4:25 p.m.

(RHSA-2024:0500) Moderate: openssl security update

2024-01-2516:25:40

access.redhat.com

openssl

ssl

tls

cryptography

security update

cve-2023-5363

bug fixes

fips-compliant

nist sp 800-56arev3

rsa-oaep

ecdh public key check

rhel-9.2.z

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.3%

JSON

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

openssl: Incorrect cipher key and IV length processing (CVE-2023-5363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-9.2.z (RHEL-14578, BZ#2153471)
OpenSSL should provide FIPS-compliant RSA-OAEP (RHEL-14616)
NIST SP 800-56Arev3 Section 5.6.2.1 - Missing ECDH Public Key Check (RHEL-15992)
In FIPS mode, OpenSSL must not perform any cryptographic operations when rsa_keygen_pairwise_test fails (RHEL-17110)

OSVersionArchitecturePackageVersionFilename
RedHat9aarch64openssl-perl< 3.0.7-18.el9_2openssl-perl-3.0.7-18.el9_2.aarch64.rpm
RedHat9ppc64leopenssl< 3.0.7-18.el9_2openssl-3.0.7-18.el9_2.ppc64le.rpm
RedHat9s390xopenssl-debuginfo< 3.0.7-18.el9_2openssl-debuginfo-3.0.7-18.el9_2.s390x.rpm
RedHat9aarch64openssl-libs-debuginfo< 3.0.7-18.el9_2openssl-libs-debuginfo-3.0.7-18.el9_2.aarch64.rpm
RedHat9x86_64openssl-debugsource< 3.0.7-18.el9_2openssl-debugsource-3.0.7-18.el9_2.x86_64.rpm
RedHat9x86_64openssl-libs< 3.0.7-18.el9_2openssl-libs-3.0.7-18.el9_2.x86_64.rpm
RedHat9s390xopenssl-perl< 3.0.7-18.el9_2openssl-perl-3.0.7-18.el9_2.s390x.rpm
RedHat9s390xopenssl-libs< 3.0.7-18.el9_2openssl-libs-3.0.7-18.el9_2.s390x.rpm
RedHat9aarch64openssl-libs< 3.0.7-18.el9_2openssl-libs-3.0.7-18.el9_2.aarch64.rpm
RedHat9ppc64leopenssl-debugsource< 3.0.7-18.el9_2openssl-debugsource-3.0.7-18.el9_2.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	aarch64	openssl-perl	< 3.0.7-18.el9_2	openssl-perl-3.0.7-18.el9_2.aarch64.rpm
RedHat	9	ppc64le	openssl	< 3.0.7-18.el9_2	openssl-3.0.7-18.el9_2.ppc64le.rpm
RedHat	9	s390x	openssl-debuginfo	< 3.0.7-18.el9_2	openssl-debuginfo-3.0.7-18.el9_2.s390x.rpm
RedHat	9	aarch64	openssl-libs-debuginfo	< 3.0.7-18.el9_2	openssl-libs-debuginfo-3.0.7-18.el9_2.aarch64.rpm
RedHat	9	x86_64	openssl-debugsource	< 3.0.7-18.el9_2	openssl-debugsource-3.0.7-18.el9_2.x86_64.rpm
RedHat	9	x86_64	openssl-libs	< 3.0.7-18.el9_2	openssl-libs-3.0.7-18.el9_2.x86_64.rpm
RedHat	9	s390x	openssl-perl	< 3.0.7-18.el9_2	openssl-perl-3.0.7-18.el9_2.s390x.rpm
RedHat	9	s390x	openssl-libs	< 3.0.7-18.el9_2	openssl-libs-3.0.7-18.el9_2.s390x.rpm
RedHat	9	aarch64	openssl-libs	< 3.0.7-18.el9_2	openssl-libs-3.0.7-18.el9_2.aarch64.rpm
RedHat	9	ppc64le	openssl-debugsource	< 3.0.7-18.el9_2	openssl-debugsource-3.0.7-18.el9_2.ppc64le.rpm

Rows per page:

1-10 of 331