Red Hat Security Advisory

RHSA-2024:0208

openssl security update

Released 2024-01-11 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.6) openssl-1:1.1.1k-12.el8_6, openssl-devel-1:1.1.1k-12.el8_6, openssl-libs-1:1.1.1k-12.el8_6 +1

TI-2023-03220 CVE-2023-3446 · GHSA-3p3x-vg38-6g9q

LOW 39

Issue summary: Checking excessively long DH keys or parameters may be very slow.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06531 Published 2023-07-19 Partial fix · 3.1.2, 3.0.10 +2 CWE-606

TI-2023-05221 CVE-2023-5678 · GHSA-2cj7-mg3x-9mhq

LOW 38

Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05091 Published 2023-11-06 Partial fix · 1.0.2zj, 1.1.1x +2 CWE-606

TI-2023-03567 CVE-2023-3817 · GHSA-c945-cqj5-wfv6

LOW 36

Issue summary: Checking excessively long DH keys or parameters may be very slow.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03047 Published 2023-07-31 Partial fix · 3.1.2, 3.0.10 +2 CWE-606