Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Oracle Linux 8 ELSA-2023-1405 Critical OpenSSL Security Update

oracle
Calendar Grey March 23, 2023
Oracle Linux Logo Esm H88
Oracle Linux Security Bulletin ELSA-2023-1405 outlines an essential OpenSSL security patch addressing various critical vulnerabilities.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[1:1.1.1k-9] - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 [1:1.1.1k-8] - Fix no-ec build Resolves: rhbz#2071020

Topics%20covered

Topics Covered

security advisory security issue critical fix openssl important update linux advisory oracle linux

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates//openssl-1.1.1k-9.el8_7.src.rpm

x86_64

openssl-1.1.1k-9.el8_7.x86_64.rpm openssl-devel-1.1.1k-9.el8_7.i686.rpm openssl-devel-1.1.1k-9.el8_7.x86_64.rpm openssl-libs-1.1.1k-9.el8_7.i686.rpm openssl-libs-1.1.1k-9.el8_7.x86_64.rpm openssl-perl-1.1.1k-9.el8_7.x86_64.rpm

aarch64

openssl-1.1.1k-9.el8_7.aarch64.rpm openssl-devel-1.1.1k-9.el8_7.aarch64.rpm openssl-libs-1.1.1k-9.el8_7.aarch64.rpm openssl-perl-1.1.1k-9.el8_7.aarch64.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2022-4304 CVE-2022-4450 CVE-2023-0215 CVE-2023-0286

Topics%20covered

Topics Covered

security advisory security issue critical fix openssl important update linux advisory oracle linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here