Skip to content
OpenAdvisories
Low ELSA-2024-0888 1 CVE

Low: edk2 security update (Oracle Linux 8)

Published Feb 20, 2024 · Updated Feb 20, 2024

Ecosystem: Oracle Linux

Summary

[20220126gitbb1bba3d77-6.el8_9.3]
- edk2-Bumped-openssl-submodule-version-to-cf317b2bb227.patch [RHEL-7560]
- Resolves: RHEL-7560
(CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 edk2-aarch64 0:20220126gitbb1bba3d77-6.el8_9.3
Oracle Linux · 8 edk2-ovmf 0:20220126gitbb1bba3d77-6.el8_9.3

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-3446

    Excessive time spent checking DH keys and parameters

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi