Skip to content
OpenAdvisories
Medium RHSA-2021:1131 1 CVE

Red Hat Security Advisory: openssl security update

Published Sep 13, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 8.1 EUS rhel_eus:8.1::baseos openssl 1:1.1.1c-5.el8_1
Red Hat · RHEL 8.1 EUS rhel_eus:8.1::baseos openssl-debuginfo 1:1.1.1c-5.el8_1
Red Hat · RHEL 8.1 EUS rhel_eus:8.1::baseos openssl-debugsource 1:1.1.1c-5.el8_1
Red Hat · RHEL 8.1 EUS rhel_eus:8.1::baseos openssl-devel 1:1.1.1c-5.el8_1
Red Hat · RHEL 8.1 EUS rhel_eus:8.1::baseos openssl-libs 1:1.1.1c-5.el8_1
Red Hat · RHEL 8.1 EUS rhel_eus:8.1::baseos openssl-libs-debuginfo 1:1.1.1c-5.el8_1
Red Hat · RHEL 8.1 EUS rhel_eus:8.1::baseos openssl-perl 1:1.1.1c-5.el8_1

Vulnerabilities 1

  • Medium 5.9
    CVE-2021-3449 Public exploit EPSS 64%

    NULL pointer deref in signature_algorithms processing

    An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a si…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1941554
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1131.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3449
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3449
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3449
  • article
    https://www.openssl.org/news/secadv/20210325.txt