Summary
[3.0.7-28.0.1_fips]
- Replace upstream references in fips man pages [Orabug: 35824276]
- Add FIPS package change: add fips suffix to Release and
set Epoch to 10 [Orabug: 35824276]
- Update FIPS module name and remove upstream references from
fips_module_indicators manpage [Orabug: 35824276]
[3.0.7-28.0.1]
- Drop OpenELA branding, apply Oracle branding patches
- Enable openssl-fips-provider dependency [Orabug: 36504822]
- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
- Replace upstream references [Orabug: 34340177]
[1:3.0.7-28]
- Patch for CVE-2024-6119
Resolves: RHEL-55340
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | openssl | 10:3.0.7-28.0.1.el9_4_fips |
| Oracle Linux · 9 | openssl-devel | 10:3.0.7-28.0.1.el9_4_fips |
| Oracle Linux · 9 | openssl-libs | 10:3.0.7-28.0.1.el9_4_fips |
| Oracle Linux · 9 | openssl-perl | 10:3.0.7-28.0.1.el9_4_fips |
Vulnerabilities 1
-
High 7.5CVE-2024-6119 EPSS 67%
Possible denial of service in X.509 name checks
Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of…