ELSA-2023-12205

ELSA-2023-12205 - openssl security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2023-03-22

Description


[1.0.2k-26_fips]
- Change Epoch from 1 to 10
- Fix DH self-test to add shared secret comparison [Orabug: 32467026]
- Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059]
- Add TLS KDF self-test [Orabug: 32467193]
- Add EC keys pairwise consistency test [Orabug: 32467059]

[1:1.0.2k-26]
- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790


Related CVEs


CVE-2023-0286

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (aarch64) openssl-1.0.2k-26.el7_9_fips.src.rpme48724bb0ca9773043e9bbb06febb7e9-
openssl-1.0.2k-26.el7_9_fips.aarch64.rpm87a339d976098ebafc44875e23c0af1e-
openssl-devel-1.0.2k-26.el7_9_fips.aarch64.rpma65896879c249f7282c0444d9d022910-
openssl-libs-1.0.2k-26.el7_9_fips.aarch64.rpm4a6fdd592f431832ba2cd2868dab5da7-
openssl-perl-1.0.2k-26.el7_9_fips.aarch64.rpm40d746a0c385f0f5babd67d4c2744f2d-
openssl-static-1.0.2k-26.el7_9_fips.aarch64.rpm44bc64a590294311a14679e7af199548-
Oracle Linux 7 (x86_64) openssl-1.0.2k-26.el7_9_fips.src.rpm103148f2d919194fe9e8e7dc1861fcae-
openssl-1.0.2k-26.el7_9_fips.x86_64.rpmcf00efd9b005e8057472b67e2a013d31-
openssl-devel-1.0.2k-26.el7_9_fips.i686.rpm056fc0176ab01e81976be988335c87f4-
openssl-devel-1.0.2k-26.el7_9_fips.x86_64.rpmcb78bc3d37de0fe443f77778f938d7e9-
openssl-libs-1.0.2k-26.el7_9_fips.i686.rpme47d714d42caaeec0e47f27f387b3188-
openssl-libs-1.0.2k-26.el7_9_fips.x86_64.rpmfc84afcce40f0f65f8c7acc3fe8c7f9d-
openssl-perl-1.0.2k-26.el7_9_fips.x86_64.rpme94c163d994421664f2f0e016aac2ddb-
openssl-static-1.0.2k-26.el7_9_fips.i686.rpm1c3f62326f913d1b91e652cf7d1b2aff-
openssl-static-1.0.2k-26.el7_9_fips.x86_64.rpm435909c8ac86481b45e7766a875f7785-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete