ELSA-2021-1024

ELSA-2021-1024 - openssl security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2021-03-29

Description

[1.1.1g-15]
- version bump

[1.1.1g-14]
- CVE-2021-3450 openssl: CA certificate check
bypass with X509_V_FLAG_X509_STRICT

[1.1.1g-13]
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing

Related CVEs

CVE-2021-3449

CVE-2021-3450

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	openssl-1.1.1g-15.el8_3.src.rpm	88854c903a20024d7054183737dcb36f	-
	openssl-1.1.1g-15.el8_3.aarch64.rpm	3aa5e456fe59536eaee5ea0346d8970e	-
	openssl-devel-1.1.1g-15.el8_3.aarch64.rpm	aae88c531cd9cf55a4ec99569e40f535	-
	openssl-libs-1.1.1g-15.el8_3.aarch64.rpm	c6bb4df05c3e4c6969b6fe8e2731ea15	-
	openssl-perl-1.1.1g-15.el8_3.aarch64.rpm	51806067a76bb4271fa10e5e067984cc	-
Oracle Linux 8 (x86_64)	openssl-1.1.1g-15.el8_3.src.rpm	88854c903a20024d7054183737dcb36f	-
	openssl-1.1.1g-15.el8_3.x86_64.rpm	4eb3ebce2bacdb4cb18bfd90eb77586f	-
	openssl-devel-1.1.1g-15.el8_3.i686.rpm	cdc3bbe0512a2edfa3b2c0660daa818f	-
	openssl-devel-1.1.1g-15.el8_3.x86_64.rpm	7b6991a1a0eb858392a26f35f74cf401	-
	openssl-libs-1.1.1g-15.el8_3.i686.rpm	d7c4af59fd793c306239986ef97a98ac	-
	openssl-libs-1.1.1g-15.el8_3.x86_64.rpm	edd98b26e1da811b137f1cc02f166707	-
	openssl-perl-1.1.1g-15.el8_3.x86_64.rpm	e86d6928161ec24293bcb65c4f28c249	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team