Skip to content
OpenAdvisories
High RHSA-2024:0500 1 CVE

Red Hat Security Advisory: openssl security update

Published Sep 16, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssl-debuginfo 1:3.0.7-18.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssl-debugsource 1:3.0.7-18.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssl-devel 1:3.0.7-18.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssl-libs-debuginfo 1:3.0.7-18.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssl-perl 1:3.0.7-18.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssl 1:3.0.7-18.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssl-debuginfo 1:3.0.7-18.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssl-debugsource 1:3.0.7-18.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssl-libs 1:3.0.7-18.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssl-libs-debuginfo 1:3.0.7-18.el9_2

Vulnerabilities 1

  • High 7.5
    CVE-2023-5363

    Incorrect cipher key & IV length processing

    Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation in the IV can result …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2243839
  • article
    https://issues.redhat.com/browse/RHEL-14578
  • article
    https://issues.redhat.com/browse/RHEL-15992
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0500.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-5363
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-5363
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-5363
  • article
    https://www.openssl.org/news/secadv/20231024.txt