Red Hat Security Advisory

RHSA-2024:0310

openssl security update

Released 2024-01-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.0.7-25.el9_3, openssl-perl-1:3.0.7-25.el9_3
Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.0.7-25.el9_3, openssl-libs-1:3.0.7-25.el9_3

TI-2023-04935 CVE-2023-5363 · GHSA-xw78-pcr6-wrg8

MEDIUM 46

Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03939 Published 2023-10-24 Fixed in 3.0.12, 3.1.4 CWE-684