Skip to content
OpenAdvisories
High ELSA-2020-5476 1 CVE

Important: openssl security and bug fix update (Oracle Linux 8)

Published Dec 17, 2020 · Updated Dec 17, 2020

Ecosystem: Oracle Linux

Summary

[1.1.1g-12]
- Fix CVE-2020-1971 ediparty null pointer dereference

[1.1.1g-11.1]
- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 openssl 1:1.1.1g-12.el8_3
Oracle Linux · 8 openssl-devel 1:1.1.1g-12.el8_3
Oracle Linux · 8 openssl-libs 1:1.1.1g-12.el8_3
Oracle Linux · 8 openssl-perl 1:1.1.1g-12.el8_3

Vulnerabilities 1

  • Medium 5.9
    CVE-2020-1971 Public exploit

    EDIPARTYNAME NULL pointer dereference

    The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equa…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine