FEDORA-EPEL-2023-a371f42add — security update for openssl11

stable

openssl11-1.1.1k-6.el7

FEDORA-EPEL-2023-a371f42add created by robert a year ago for Fedora EPEL 7

backport from 1.1.1k-11: Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

Resolves: RHEL-16538
backport from 1.1.1k-10: Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters

Resolves: RHEL-14245
backport from 1.1.1k-10: Fix CVE-2023-3817: Excessive time spent checking DH q parameter value

Resolves: RHEL-14239

This update has been submitted for testing by robert.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago

This update has been pushed to testing.

a year ago

generalprobe provided feedback a year ago

karma

robert edited this update.

a year ago

This update has been submitted for stable by robert.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

modified

a year ago

Builds

openssl11-1.1.1k-6.el7

BZ#2224962 CVE-2023-3446 openssl: Excessive time spent checking DH keys and parameters

BZ#2227852 CVE-2023-3817 OpenSSL: Excessive time spent checking DH q parameter value

BZ#2248616 CVE-2023-5678 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

BZ#2248620 CVE-2023-5678 openssl11: openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow [epel-7]

openssl11-1.1.1k-6.el7

Automated Test Results

ignored