Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-7895 http://linux.oracle.com/errata/ELSA-2025-7895.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: compat-openssl10-1.0.2o-4.el8_10.1.i686.rpm compat-openssl10-1.0.2o-4.el8_10.1.x86_64.rpm aarch64: compat-openssl10-1.0.2o-4.el8_10.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//compat-openssl10-1.0.2o-4.el8_10.1.src.rpm Related CVEs: CVE-2023-0286 Description of changes: [1.1.0.2o-4.1] - Fix CVE-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-9699 _______________________________________________ El-errata mailing list
An update for openssl is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: openssl security update Advisory ID: RHSA-2023:1440-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:1440 Issue date: 2023-03-23 CVE Names: CVE-2023-0286 ==================================================================== 1. Summary: An update for openssl is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS EUS (v.8.4) - aarch64, ppc64le, s390x, x86_64 3. Description: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. 5. Bugs fixed(https://bugzilla.redhat.com/): 2164440 - CVE-2023-0286 openssl: X.400 address type confusion in X.509 GeneralName 6. Package List: Red Hat Enterprise Linux BaseOS EUS (v.8.4): Source: openssl-1.1.1g-18.el8_4.src.rpm aarch64: openssl-1.1.1g-18.el8_4.aarch64.rpm openssl-debuginfo-1.1.1g-18.el8_4.aarch64.rpm openssl-debugsource-1.1.1g-18.el8_4.aarch64.rpm openssl-devel-1.1.1g-18.el8_4.aarch64.rpm openssl-libs-1.1.1g-18.el8_4.aarch64.rpm openssl-libs-debuginfo-1.1.1g-18.el8_4.aarch64.rpm openssl-perl-1.1.1g-18.el8_4.aarch64.rpm ppc64le: openssl-1.1.1g-18.el8_4.ppc64le.rpm openssl-debuginfo-1.1.1g-18.el8_4.ppc64le.rpm openssl-debugsource-1.1.1g-18.el8_4.ppc64le.rpm openssl-devel-1.1.1g-18.el8_4.ppc64le.rpm openssl-libs-1.1.1g-18.el8_4.ppc64le.rpm openssl-libs-debuginfo-1.1.1g-18.el8_4.ppc64le.rpm openssl-perl-1.1.1g-18.el8_4.ppc64le.rpm s390x: openssl-1.1.1g-18.el8_4.s390x.rpm openssl-debuginfo-1.1.1g-18.el8_4.s390x.rpm openssl-debugsource-1.1.1g-18.el8_4.s390x.rpm openssl-devel-1.1.1g-18.el8_4.s390x.rpm openssl-libs-1.1.1g-18.el8_4.s390x.rpm openssl-libs-debuginfo-1.1.1g-18.el8_4.s390x.rpm openssl-perl-1.1.1g-18.el8_4.s390x.rpm x86_64: openssl-1.1.1g-18.el8_4.x86_64.rpm openssl-debuginfo-1.1.1g-18.el8_4.i686.rpm openssl-debuginfo-1.1.1g-18.el8_4.x86_64.rpm openssl-debugsource-1.1.1g-18.el8_4.i686.rpm openssl-debugsource-1.1.1g-18.el8_4.x86_64.rpm openssl-devel-1.1.1g-18.el8_4.i686.rpm openssl-devel-1.1.1g-18.el8_4.x86_64.rpm openssl-libs-1.1.1g-18.el8_4.i686.rpm openssl-libs-1.1.1g-18.el8_4.x86_64.rpm openssl-libs-debuginfo-1.1.1g-18.el8_4.i686.rpm openssl-libs-debuginfo-1.1.1g-18.el8_4.x86_64.rpm openssl-perl-1.1.1g-18.el8_4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-0286 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . Morecontact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBZBxs7NzjgjWX9erEAQgfIBAAoZdbDRt1tK2saOKwSBubbkgrG/ObtOka yr2fVEt+JUBMWpuJxuUoMxp/tYhsYO0rJTuOXpjcpxGW1mcchp5CSRArNcPX7vrF YGWPMPPoAFQFAF5ST4V+jTlRTvhUBmlQlFAQEmogoX/pnqtUdI95rZXY7ELpnhQk SNKec7Iw+PcD1JNg80a6J95OjhHtNCM5tLhJgsIrb3kvhmPMzjnSh2UftTXKc1oE jzQjxTS9Zj/PZmY8vRnTIeYdx/aXdcjbnSOPnif0QRDiyOmZTdN081UwePbHJk9E 8QDi72MSsbMuQjfVg6PtP+oZvALcBOxVV431ie3uivF3gosawPjnqUnaPfGK4eY2 igpSt3KV4gDIlbxK2HhM+Mr+5RhnQ+nN5zY/Z362IAMsKhZ+C+M36K0CksNOZYqF 56RjgvN4sI/oydTJ21RBBHpAf+Hl3BOpyTo2uj4YwUZY9Oa78VrQ9J+LM6bmP/G4 1huLqDa8KwDFEsnbVcICHgVk0Iq0ioIK3IBsHhG85XLKPWgvLeSzaBxiwsNxwPlK 4Wsqm6p60oj9R7xRIVkNatSJj505NXAAN0c2l7/hNUShcyRJqwnxAMO4xvVHlcuL aNqzrdA5Ichos1BkHXuT7cZp8nEp3eUPum0IzuPZe/2esOYpmKHCi1ptcSmgbx4u Lcf49d75pmE=LYX/ -----END PGP SIGNATURE----- -- RHSA-announce mailing list
An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: openssl security update Advisory ID: RHSA-2023:1438-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:1438 Issue date: 2023-03-23 CVE Names: CVE-2023-0286 ==================================================================== 1. Summary: An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server (v. 6 ELS) - i386, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6 ELS) - i386, s390x, x86_64 3. Description: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For the update to take effect, all services linked to the OpenSSL library must be restarted, orthe system rebooted. 5. Bugs fixed (https://bugzilla.redhat.com/): 2164440 - CVE-2023-0286 openssl: X.400 address type confusion in X.509 GeneralName 6. Package List: Red Hat Enterprise Linux Server (v. 6 ELS): Source: openssl-1.0.1e-61.el6_10.src.rpm i386: openssl-1.0.1e-61.el6_10.i686.rpm openssl-debuginfo-1.0.1e-61.el6_10.i686.rpm openssl-devel-1.0.1e-61.el6_10.i686.rpm s390x: openssl-1.0.1e-61.el6_10.s390.rpm openssl-1.0.1e-61.el6_10.s390x.rpm openssl-debuginfo-1.0.1e-61.el6_10.s390.rpm openssl-debuginfo-1.0.1e-61.el6_10.s390x.rpm openssl-devel-1.0.1e-61.el6_10.s390.rpm openssl-devel-1.0.1e-61.el6_10.s390x.rpm x86_64: openssl-1.0.1e-61.el6_10.i686.rpm openssl-1.0.1e-61.el6_10.x86_64.rpm openssl-debuginfo-1.0.1e-61.el6_10.i686.rpm openssl-debuginfo-1.0.1e-61.el6_10.x86_64.rpm openssl-devel-1.0.1e-61.el6_10.i686.rpm openssl-devel-1.0.1e-61.el6_10.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6 ELS): i386: openssl-debuginfo-1.0.1e-61.el6_10.i686.rpm openssl-perl-1.0.1e-61.el6_10.i686.rpm openssl-static-1.0.1e-61.el6_10.i686.rpm s390x: openssl-debuginfo-1.0.1e-61.el6_10.s390x.rpm openssl-perl-1.0.1e-61.el6_10.s390x.rpm openssl-static-1.0.1e-61.el6_10.s390x.rpm x86_64: openssl-debuginfo-1.0.1e-61.el6_10.x86_64.rpm openssl-perl-1.0.1e-61.el6_10.x86_64.rpm openssl-static-1.0.1e-61.el6_10.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-0286 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBZBxs7NzjgjWX9erEAQjEng/9H4eD9JfHPrMo7I2nNn5BmFSsAkVKGJmH S+UwS28apMed5VKlk+kZuBlJh3q6FhE2TlEU+bQ2FjJCFi77UWzlI4upEvjbq//1 p+U+3/mW1safS9tGkWzQ412ZyEJFwmiO5LwBdzTg8MFwt1DnE3Dqhx+DD5DY19hN +v8tOPVDKG7WthUB0bnzI38GKAo6xCNwHXAH/22SRgBMbxMp6PY9NoiXpNt8YON3 YFIW16qvTpjfWtKvalhmg97icKyxEh/hOXThHgaLT8m39NfiMrb0uNYMOsPuYos8 /uXuQXSlGCfKSAf6wz1KMa94fg9p1GXuW2dLM+hgjENcIKGFiB6Wqp6LrrIezT1j 0v4XRtcTp6Qhq2YR+053EI1VBZa7Uj0icWiN8o0efgOezX7LdyucRMa7jWkPac72 ewpf59CSsUuvuh8+DJhZAr1bnK1LDiP9WwAmL6KC7pe+/hGGHuPNxmA3bB2pNRXu k9CAuxTtpEGqM8NpvvtnixNJ/vhvJ1r7jQErwVDLSBNlYEtEDxPk7TsDxdhlA2Tf o6aZi4yMFDdJSrktR96t+xthkgjkHicMn3wt+XSFzXAWNf0+nBR6Jm8PxD19eApB DDI0U0Alkd1mG9EehN/gDegTorACR+lJccdgc0O+j37rtMNuxGT9LpiwWJj5xn7i dKBbvGOB2ok=W1uu -----END PGP SIGNATURE----- -- RHSA-announce mailing list
openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 openssl-1.0.2k-26.el7_9.x86_64.rpm openssl-debuginfo-1.0.2k-26.el7_9.i686.rpm openssl-debuginfo-1.0.2k-26.el7_9.x86_64.rpm openssl-libs-1.0.2k- [More...]. Synopsis: Important: openssl security update Advisory ID: SLSA-2023:1335-1 Issue Date: 2023-03-22 CVE Numbers: CVE-2023-0286 -- Security Fix(es): * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE -- SL7 x86_64 openssl-1.0.2k-26.el7_9.x86_64.rpm openssl-debuginfo-1.0.2k-26.el7_9.i686.rpm openssl-debuginfo-1.0.2k-26.el7_9.x86_64.rpm openssl-libs-1.0.2k-26.el7_9.i686.rpm openssl-libs-1.0.2k-26.el7_9.x86_64.rpm openssl-devel-1.0.2k-26.el7_9.i686.rpm openssl-devel-1.0.2k-26.el7_9.x86_64.rpm openssl-perl-1.0.2k-26.el7_9.x86_64.rpm openssl-static-1.0.2k-26.el7_9.i686.rpm openssl-static-1.0.2k-26.el7_9.x86_64.rpm - Scientific Linux Development Team . Critical: openssl vulnerability patch reveals information on the CVE-2023-0386 concern, highlighting impacted packages and corrective actions.. OpenSSL Update, Important Fix, Scientific Linux, Address Confusion. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.