Red Hat Security Advisory

RHSA-2024:6783

openssl security update

Released 2024-09-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.0.7-28.el9_4, openssl-perl-1:3.0.7-28.el9_4
Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.0.7-28.el9_4, openssl-libs-1:3.0.7-28.el9_4

Fixes 1 record

TI-2024-05670 CVE-2024-6119 · GHSA-7m4m-pwhv-49c5

Possible denial of service in X.509 name checks

HIGH 75

Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.66582 Published 2024-09-03 Partial fix · 3.3.2, 3.2.3 +2 CWE-843