Release Info

Advisory: CLSA-2023:1676026276

OS: CentOS 8.5 ELS

Public date: 2023-02-10 00:00:00

Project: openssl

Version: 1.1.1k-5.el8.5.tuxcare.els4

Errata link: https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1676026276.html

Changelog

- CVE-2023-0215: Fix a UAF resulting from a bug in BIO_new_NDEF - CVE-2023-0286: Fix GENERAL_NAME_cmp for x400Address

Update

Update command: dnf update openssl*

Packages list

openssl-1.1.1k-5.el8.5.tuxcare.els4.x86_64.rpm openssl-devel-1.1.1k-5.el8.5.tuxcare.els4.i686.rpm openssl-devel-1.1.1k-5.el8.5.tuxcare.els4.x86_64.rpm openssl-libs-1.1.1k-5.el8.5.tuxcare.els4.i686.rpm openssl-libs-1.1.1k-5.el8.5.tuxcare.els4.x86_64.rpm openssl-perl-1.1.1k-5.el8.5.tuxcare.els4.x86_64.rpm openssl-static-1.1.1k-5.el8.5.tuxcare.els4.x86_64.rpm

CVEs

CVE-2023-0286
CVE-2023-0215