ELSA-2022-9023

ELSA-2022-9023 - openssl security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2022-01-14

Description

[1.0.2k-23.0.1]
- Change Epoch from 1 to 10
- Fix DH self-test to add shared secret comparison [Orabug: 32467026]
- Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059]
- Add TLS KDF self-test [Orabug: 32467193]
- Add EC keys pairwise consistency test [Orabug: 32467059]

[1.0.2k-23]
- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054

Related CVEs

CVE-2021-3712

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	openssl-1.0.2k-23.0.1.el7_9_fips.src.rpm	3732bc28ac182ae2a2009e932475054e4588c285a6666d5c28325e767bc5f31c	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-1.0.2k-23.0.1.el7_9_fips.aarch64.rpm	5e5bc5131f76982918232ec441b92a0eea9a12eee30beb827ae9ac009e3cf12c	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-devel-1.0.2k-23.0.1.el7_9_fips.aarch64.rpm	4ff79e6bf28366e08c669741b756c4b84ed95919d5eeb709c21652ac99fdce60	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-libs-1.0.2k-23.0.1.el7_9_fips.aarch64.rpm	80fc1cea87fa165338d07191aad404588f96fb4503d7366643ef4a324beaa48e	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-perl-1.0.2k-23.0.1.el7_9_fips.aarch64.rpm	3c5d0983c1d57175f63fc7423e8685a290bc16b9c913f2632ef33f8bc3a11159	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-static-1.0.2k-23.0.1.el7_9_fips.aarch64.rpm	2ce0b0c19bfba0b4dd16e1857a8a7de6f1d050bc260e15ca574272828f1b6e39	ELSA-2017-3518	ol7_aarch64_u8_security_validation
Oracle Linux 7 (x86_64)	openssl-1.0.2k-23.0.1.el7_9_fips.src.rpm	3732bc28ac182ae2a2009e932475054e4588c285a6666d5c28325e767bc5f31c	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-1.0.2k-23.0.1.el7_9_fips.x86_64.rpm	2a5058419904bade21116391c7f31beb3f9cdbf414ef0424e24053b19860d6be	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-devel-1.0.2k-23.0.1.el7_9_fips.i686.rpm	dc3185af56b65f0ae24d7211503994899f6ed8463b81afcd27de0714af346651	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-devel-1.0.2k-23.0.1.el7_9_fips.x86_64.rpm	98c0bcb23f0bfa5eb7f74dd2418df4fa6f741f6a36f4866776bc737391d3bc5c	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-libs-1.0.2k-23.0.1.el7_9_fips.i686.rpm	c3cd2ffb81442c25c2c3b5f480ec67e5e319591818dc44569dab1f767de05f3a	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-libs-1.0.2k-23.0.1.el7_9_fips.x86_64.rpm	7ba1b808e71f5840513b007f6fd4b583205f3232c9d8ba06f5f4a144c5061a0b	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-perl-1.0.2k-23.0.1.el7_9_fips.x86_64.rpm	fd58a40353be30556f913aca20b9ca0a76206a2d3691ef6cb8851231f071b224	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-static-1.0.2k-23.0.1.el7_9_fips.i686.rpm	e3765706f74617faf314b96bbf8dd49cfc73ff9a97677680c0d5c7212e903174	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-static-1.0.2k-23.0.1.el7_9_fips.x86_64.rpm	6c337bc14c890187371fe6be67266329faea6f85e50ec0259581637774831a91	ELSA-2017-3518	ol7_x86_64_u8_security_validation

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team