Summary
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: Incorrect cipher key and IV length processing (CVE-2023-5363)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | openssl | 1:3.0.7-25.el9_3 |
| AlmaLinux · 9 | openssl-devel | 1:3.0.7-25.el9_3 |
| AlmaLinux · 9 | openssl-libs | 1:3.0.7-25.el9_3 |
| AlmaLinux · 9 | openssl-perl | 1:3.0.7-25.el9_3 |
Vulnerabilities 1
-
High 7.5
Incorrect cipher key & IV length processing
Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation in the IV can result …