ELSA-2025-1330

ELSA-2025-1330 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-02-12

Description

[3.2.2-6.0.1.1]
- Enable openssl-fips-provider dependency [Orabug: 36504822]
- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
- Replace upstream references [Orabug: 34340177]

[1:3.2.2-6.1]
- RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
Resolves: RHEL-76755

Related CVEs

CVE-2024-12797

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	openssl-3.2.2-6.0.1.el9_5.1.src.rpm	aa19133c5653301424fdb559322bde5a14adc5f76c89486eab03ac4f248f3d2d	-	ol9_aarch64_appstream
	openssl-3.2.2-6.0.1.el9_5.1.src.rpm	aa19133c5653301424fdb559322bde5a14adc5f76c89486eab03ac4f248f3d2d	-	ol9_aarch64_baseos_latest
	openssl-3.2.2-6.0.1.el9_5.1.src.rpm	aa19133c5653301424fdb559322bde5a14adc5f76c89486eab03ac4f248f3d2d	-	ol9_aarch64_u5_baseos_patch
	openssl-3.2.2-6.0.1.el9_5.1.aarch64.rpm	d7bc986171688d7fc815367e1c9af13bf824e28cb6422b2f527be692f0bdd394	-	ol9_aarch64_baseos_latest
	openssl-3.2.2-6.0.1.el9_5.1.aarch64.rpm	d7bc986171688d7fc815367e1c9af13bf824e28cb6422b2f527be692f0bdd394	-	ol9_aarch64_u5_baseos_patch
	openssl-devel-3.2.2-6.0.1.el9_5.1.aarch64.rpm	9b0dc7bbfe79aefa4b90ea692432ca3d8e075aaf51c5b2c4826a25951c4c2429	-	ol9_aarch64_appstream
	openssl-libs-3.2.2-6.0.1.el9_5.1.aarch64.rpm	917ec956d5786bfaf31dd9045f02e39741508b3dc360b5546c93d6ef2c914a78	-	ol9_aarch64_baseos_latest
	openssl-libs-3.2.2-6.0.1.el9_5.1.aarch64.rpm	917ec956d5786bfaf31dd9045f02e39741508b3dc360b5546c93d6ef2c914a78	-	ol9_aarch64_u5_baseos_patch
	openssl-perl-3.2.2-6.0.1.el9_5.1.aarch64.rpm	c0217bc4ef4738846d7a5a238467e08b5bdbb6c2e04037f74be670994f74f234	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	openssl-3.2.2-6.0.1.el9_5.1.src.rpm	aa19133c5653301424fdb559322bde5a14adc5f76c89486eab03ac4f248f3d2d	-	ol9_x86_64_appstream
	openssl-3.2.2-6.0.1.el9_5.1.src.rpm	aa19133c5653301424fdb559322bde5a14adc5f76c89486eab03ac4f248f3d2d	-	ol9_x86_64_baseos_latest
	openssl-3.2.2-6.0.1.el9_5.1.src.rpm	aa19133c5653301424fdb559322bde5a14adc5f76c89486eab03ac4f248f3d2d	-	ol9_x86_64_u5_baseos_patch
	openssl-3.2.2-6.0.1.el9_5.1.x86_64.rpm	1207abeaef871457ad10056f453a6a3a57354d49de7c977364611c140258d508	-	ol9_x86_64_baseos_latest
	openssl-3.2.2-6.0.1.el9_5.1.x86_64.rpm	1207abeaef871457ad10056f453a6a3a57354d49de7c977364611c140258d508	-	ol9_x86_64_u5_baseos_patch
	openssl-devel-3.2.2-6.0.1.el9_5.1.i686.rpm	8935b9f7c46ae40a44370c68676adf548fcb1e5f9c16d10af3a6237cec2872d1	-	ol9_x86_64_appstream
	openssl-devel-3.2.2-6.0.1.el9_5.1.x86_64.rpm	fb3c7d96f4be60b68cb6a6820313858d1795bf984bbf92c1bc57e4ddf2d4f2db	-	ol9_x86_64_appstream
	openssl-libs-3.2.2-6.0.1.el9_5.1.i686.rpm	40a50a4ef17ea4c10b1d9c10dfd23b9942ddc4bbf30befceb49ff5bf8cef5257	-	ol9_x86_64_baseos_latest
	openssl-libs-3.2.2-6.0.1.el9_5.1.i686.rpm	40a50a4ef17ea4c10b1d9c10dfd23b9942ddc4bbf30befceb49ff5bf8cef5257	-	ol9_x86_64_u5_baseos_patch
	openssl-libs-3.2.2-6.0.1.el9_5.1.x86_64.rpm	110ce204bc9f4a251046b5dac9c5839f82d9a5ce12e8d45f827272ee27966fc2	-	ol9_x86_64_baseos_latest
	openssl-libs-3.2.2-6.0.1.el9_5.1.x86_64.rpm	110ce204bc9f4a251046b5dac9c5839f82d9a5ce12e8d45f827272ee27966fc2	-	ol9_x86_64_u5_baseos_patch
	openssl-perl-3.2.2-6.0.1.el9_5.1.x86_64.rpm	d4bd426620d5463f7d9dfd7fc163092be2c5ae1c7dce16d52a20a8cd3df43162	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team