Skip to content
OpenAdvisories
Medium ELSA-2024-6783 1 CVE

Moderate: openssl security update (Oracle Linux 9)

Published Sep 19, 2024 · Updated Sep 19, 2024

Ecosystem: Oracle Linux

Summary

[3.0.7-28.0.1]
- Drop OpenELA branding, apply Oracle branding patches
- Enable openssl-fips-provider dependency [Orabug: 36504822]
- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
- Replace upstream references [Orabug: 34340177]

[1:3.0.7-28]
- Patch for CVE-2024-6119
Resolves: RHEL-55340

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 9 openssl 1:3.0.7-28.0.1.el9_4
Oracle Linux · 9 openssl-devel 1:3.0.7-28.0.1.el9_4
Oracle Linux · 9 openssl-libs 1:3.0.7-28.0.1.el9_4
Oracle Linux · 9 openssl-perl 1:3.0.7-28.0.1.el9_4

Vulnerabilities 1

  • High 7.5
    CVE-2024-6119 EPSS 67%

    Possible denial of service in X.509 name checks

    Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi