[CLSA-2024:1718291413] openssl: Fix of 6 CVEs
Type:
security
Severity:
Moderate
Release date:
2024-06-13 15:10:17 UTC
Description:
- CVE-2024-0727: Fix NULL pointer dereference in processing PKCS12 files, preventing potential DoS attack - CVE-2023-6129: Fix POLY1305 MAC implementation bug that corrupts internal state on PowerPC CPUs with vector instructions - CVE-2023-5678: Fix issue with excessively long X9.42 DH keys or parameters causing long delays and potential DoS by adding checks in DH_generate_key() and DH_check_pub_key() functions - CVE-2023-3817: Fix excessively long DH key or parameters check causing potential Denial of Service by preventing unnecessary checks if q is larger than p - CVE-2023-3446: Fix issue of excessively long DH keys or parameters causing slow checks, leading to potential Denial of Service. Added additional checks to prevent DoS vulnerability in DH_check(), DH_check_ex(), and EVP_PKEY_param_check() functions - CVE-2023-2975: Fix issue with AES-SIV cipher ignoring empty associated data entries by performing authentication operation for empty data during EVP_EncryptUpdate()
Updated packages:
  • openssl-3.0.7-17.el9_2.tuxcare.els2.x86_64.rpm
    sha:ad4a0ce9be95b2bf4e4f49d706aeb95633b57bf2
  • openssl-devel-3.0.7-17.el9_2.tuxcare.els2.i686.rpm
    sha:daf80fa45f430e6ca42978758abad523d6ccfd92
  • openssl-devel-3.0.7-17.el9_2.tuxcare.els2.x86_64.rpm
    sha:33938c78980ad74e3b9d526c08f12ca4f875735e
  • openssl-libs-3.0.7-17.el9_2.tuxcare.els2.i686.rpm
    sha:c20661d12ce8a35ac238de2b3f12b2d6b8bd63f8
  • openssl-libs-3.0.7-17.el9_2.tuxcare.els2.x86_64.rpm
    sha:b2aca3790fa42edca438b6b101f3e475ab3c1b68
  • openssl-perl-3.0.7-17.el9_2.tuxcare.els2.x86_64.rpm
    sha:777833a4589273857e657e917e8cdd0324aad1fa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.