Red Hat Security AdvisoryRHSA-2022:0064
openssl security update
Released 2022-01-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.2k-23.el7_9, openssl-libs-1:1.0.2k-23.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.2k-23.el7_9, openssl-perl-1:1.0.2k-23.el7_9, openssl-static-1:1.0.2k-23.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.2k-23.el7_9, openssl-perl-1:1.0.2k-23.el7_9, openssl-static-1:1.0.2k-23.el7_9
- Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.2k-23.el7_9, openssl-devel-1:1.0.2k-23.el7_9, openssl-devel-1:1.0.2k-23.el7_9.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.2k-23.el7_9, openssl-static-1:1.0.2k-23.el7_9, openssl-static-1:1.0.2k-23.el7_9.ppc
- Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.2k-23.el7_9, openssl-devel-1:1.0.2k-23.el7_9, openssl-libs-1:1.0.2k-23.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.2k-23.el7_9, openssl-static-1:1.0.2k-23.el7_9
Fixes 1 record
Priority MEDIUM 63
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.48084 · Published 2021-08-24 · Partial fix · 111.16.0 CWE-125
