Skip to content
OpenAdvisories
High ELSA-2023-1335 1 CVE

Important: openssl security update (Oracle Linux 7)

Published Mar 20, 2023 · Updated Mar 20, 2023

Ecosystem: Oracle Linux

Summary

[1:1.0.2k-26]
- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 openssl 1:1.0.2k-26.el7_9
Oracle Linux · 7 openssl-devel 1:1.0.2k-26.el7_9
Oracle Linux · 7 openssl-libs 1:1.0.2k-26.el7_9
Oracle Linux · 7 openssl-perl 1:1.0.2k-26.el7_9
Oracle Linux · 7 openssl-static 1:1.0.2k-26.el7_9

Vulnerabilities 1

  • High 7.4
    CVE-2023-0286 Public exploit EPSS 68%

    X.400 address type confusion in X.509 GeneralName

    There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address fiel…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI crates.io