ELSA-2023-12205

ELSA-2023-12205 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-03-22

Description

[1.0.2k-26_fips]
- Change Epoch from 1 to 10
- Fix DH self-test to add shared secret comparison [Orabug: 32467026]
- Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059]
- Add TLS KDF self-test [Orabug: 32467193]
- Add EC keys pairwise consistency test [Orabug: 32467059]

[1:1.0.2k-26]
- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790

Related CVEs

CVE-2023-0286

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	openssl-1.0.2k-26.el7_9_fips.src.rpm	0422bd3a8b22929d2ff224fd758b035cd62cfaf32d441f5855e23ae768faaff9	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-1.0.2k-26.el7_9_fips.aarch64.rpm	aa7f61c4e75db40d89827ac1a0bf9926c7d6b14ba0648a734f14463bbffd3d14	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-devel-1.0.2k-26.el7_9_fips.aarch64.rpm	c4f0979aa8fe3b3e62a01e63c44734ee4d8159c2a6f118dd1e8ce65c7532becd	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-libs-1.0.2k-26.el7_9_fips.aarch64.rpm	01a744012ed3aeeace5fb2376b43cbcef964810e269b38f239ecef5e52344e71	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-perl-1.0.2k-26.el7_9_fips.aarch64.rpm	ba1e438f0720ca23414f9c3d7a9e9d6fdcadef16667d792879e9ff7ff887265c	ELSA-2017-3518	ol7_aarch64_u8_security_validation
	openssl-static-1.0.2k-26.el7_9_fips.aarch64.rpm	2956dbc03fa2497c4acf4b072caf6116cb2491662bb15b12af554d5015991ffa	ELSA-2017-3518	ol7_aarch64_u8_security_validation
Oracle Linux 7 (x86_64)	openssl-1.0.2k-26.el7_9_fips.src.rpm	028bc42e6002a37fe4a5920db8a33f468ecd807244e963a4e037aaa92308742c	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-1.0.2k-26.el7_9_fips.x86_64.rpm	7c4c328bc5b838832d4657665649c599ba732eb0d34bcb16b3737d2f796ad89d	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-devel-1.0.2k-26.el7_9_fips.i686.rpm	f511246105994d4b96ccb8610934896212bfffe81d90d89a549b35c46e2fa490	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-devel-1.0.2k-26.el7_9_fips.x86_64.rpm	90aaf7414425cbdfbe1ce814db1fd20af33dd4a5def38d35fd35f014de47807d	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-libs-1.0.2k-26.el7_9_fips.i686.rpm	d8ac67114359ffe9ea1e35c4dea5c03a57347cc2c00807293cc26bdbae8b93ed	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-libs-1.0.2k-26.el7_9_fips.x86_64.rpm	a5d6592eae76c4c00a3b2b3c8d1fed6186445b102a245bb0cce33c7fb82edd94	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-perl-1.0.2k-26.el7_9_fips.x86_64.rpm	e9c07df745232f197772945abcb34bbb35573e4099967e502df66a15446111ee	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-static-1.0.2k-26.el7_9_fips.i686.rpm	8616655f930f9b7f7351d49d56840f9b1be2284bd7c611c0d5721c0af1a575c2	ELSA-2017-3518	ol7_x86_64_u8_security_validation
	openssl-static-1.0.2k-26.el7_9_fips.x86_64.rpm	930bef5a790d983a8ebbe0941f3018433d6743b9606b705e8b9ea7223ed10dec	ELSA-2017-3518	ol7_x86_64_u8_security_validation

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team