[CLSA-2024:1709839769] Fix CVE(s): CVE-2023-5678
Type:
security
Severity:
Moderate
Release date:
2024-03-07 19:29:32 UTC
Description:
* SECURITY UPDATE: Denial of service could be encountered when generating excessively long DH keys or checking excessively long DH keys or parameters. - debian/patches/CVE-2023-5678.patch: Make DH_check_pub_key() and DH_generate_key() safer yet. - CVE-2023-5678.
Updated packages:
  • libssl-dev_1.0.2g-1ubuntu4.21+tuxcare.els10_amd64.deb
    sha:c2ed846c8f6a194212a19d11fa1ef038390d3dab
  • libssl-doc_1.0.2g-1ubuntu4.21+tuxcare.els10_all.deb
    sha:69b600d26167c3dd38b4e89cf021158af9ee2579
  • libssl1.0.0_1.0.2g-1ubuntu4.21+tuxcare.els10_amd64.deb
    sha:09149158f7f5814172deb22da199ff87fab387d1
  • openssl_1.0.2g-1ubuntu4.21+tuxcare.els10_amd64.deb
    sha:1f94fb6b1e23ffb47fb4867ab7747435f8c7674a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.