Red Hat Security Advisory

RHSA-2021:5226

openssl security update

Released 2021-12-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1k-5.el8_5, openssl-devel-1:1.1.1k-5.el8_5, openssl-libs-1:1.1.1k-5.el8_5 +1

Fixes 1 record

TI-2021-02646 CVE-2021-3712 · GHSA-q9wj-f4qw-6vfj

Read buffer overruns processing ASN.1 strings

MEDIUM 63

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.48084 Published 2021-08-24 Partial fix · 111.16.0 CWE-125