Red Hat Security AdvisoryRHSA-2021:3798
openssl security update
Released 2021-10-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.2k-22.el7_9, openssl-libs-1:1.0.2k-22.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.2k-22.el7_9, openssl-perl-1:1.0.2k-22.el7_9, openssl-static-1:1.0.2k-22.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.2k-22.el7_9, openssl-perl-1:1.0.2k-22.el7_9, openssl-static-1:1.0.2k-22.el7_9
- Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.2k-22.el7_9, openssl-devel-1:1.0.2k-22.el7_9, openssl-devel-1:1.0.2k-22.el7_9.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.2k-22.el7_9, openssl-static-1:1.0.2k-22.el7_9, openssl-static-1:1.0.2k-22.el7_9.ppc
- Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.2k-22.el7_9, openssl-devel-1:1.0.2k-22.el7_9, openssl-libs-1:1.0.2k-22.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.2k-22.el7_9, openssl-static-1:1.0.2k-22.el7_9
Fixes 2 records
Priority HIGH 70
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.50732 · Published 2021-02-16 · Partial fix · 111.14.0 CWE-190
Priority LOW 37
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0741 · Published 2021-02-16 · Partial fix · 111.14.0 CWE-476
