{
  "cves": [
    "CVE-2024-4741",
    "CVE-2024-2511",
    "CVE-2024-5535",
    "CVE-2024-4603"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "LOW"
  },
  "description": "openssl\n[1:3.2.2-6.0.1]\n- Enable openssl-fips-provider dependency [Orabug: 36504822]\n- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]\n- Replace upstream references [Orabug: 34340177]\n\n[1:3.2.2-6]\n- rebuilt\n  Related: RHEL-55339\n\n[1:3.2.2-5]\n- Fix CVE-2024-6119: Possible denial of service in X.509 name checks\n  Resolves: RHEL-55339\n\n[1:3.2.2-4]\n- Fix CVE-2024-5535: SSL_select_next_proto buffer overread\n  Resolves: RHEL-45657\n\n[1:3.2.2-3]\n- Replace HKDF backward compatibility patch with the official one\n  Related: RHEL-40823\n\n[1:3.2.2-2]\n- Add workaround for EVP_PKEY_CTX_add1_hkdf_info with older providers\n  Resolves: RHEL-40823\n\n[1:3.2.2-1]\n- Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,\n  and Minerva attack.\n  Resolves: RHEL-32148\n  Resolves: RHEL-36792\n  Resolves: RHEL-38514\n  Resolves: RHEL-39111\n\n[1:3.2.1-2]\n- Update RNG changing for FIPS purpose\n  Resolves: RHEL-35380\n\n[1:3.2.1-1]\n- Rebasing OpenSSL to 3.2.1\n  Resolves: RHEL-26271\n\n[1:3.0.7-27]\n- Use certified FIPS module instead of freshly built one in Red Hat distribution\n  Related: RHEL-23474\n\n[1:3.0.7-26]\n- Avoid implicit function declaration when building openssl\n  Related: RHEL-1780\n- In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails\n  Resolves: RHEL-17104\n- Add a directory for OpenSSL providers configuration\n  Resolves: RHEL-17193\n- Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context\n  Resolves: RHEL-19515\n- POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)\n  Resolves: RHEL-21151\n- Excessive time spent checking invalid RSA public keys (CVE-2023-6237)\n  Resolves: RHEL-21654\n- SSL ECDHE Kex fails when pkcs11 engine is set in config file\n  Resolves: RHEL-20249\n- Denial of service via null dereference in PKCS#12\n  Resolves: RHEL-22486\n- Use certified FIPS module instead of freshly built one in Red Hat distribution\n  Resolves: RHEL-23474\n\n[1:3.0.7-25]\n- Provide relevant diagnostics when FIPS checksum is corrupted\n  Resolves: RHEL-5317\n- Don't limit using SHA1 in KDFs in non-FIPS mode.\n  Resolves: RHEL-5295\n- Provide empty evp_properties section in main OpenSSL configuration file\n  Resolves: RHEL-11439\n- Avoid implicit function declaration when building openssl\n  Resolves: RHEL-1780\n- Forbid explicit curves when created via EVP_PKEY_fromdata\n  Resolves: RHEL-5304\n- AES-SIV cipher implementation contains a bug that causes it to ignore empty\n  associated data entries (CVE-2023-2975)\n  Resolves: RHEL-5302\n- Excessive time spent checking DH keys and parameters (CVE-2023-3446)\n  Resolves: RHEL-5306\n- Excessive time spent checking DH q parameter value (CVE-2023-3817)\n  Resolves: RHEL-5308\n- Fix incorrect cipher key and IV length processing (CVE-2023-5363)\n  Resolves: RHEL-13251\n- Switch explicit FIPS indicator for RSA-OAEP to approved following\n  clarification with CMVP\n  Resolves: RHEL-14083\n- Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)\n  Resolves: RHEL-14083\n- Add missing ECDH Public Key Check in FIPS mode\n  Resolves: RHEL-15990\n- Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)\n  Resolves: RHEL-15954\n\n[1:3.0.7-24]\n- Make FIPS module configuration more crypto-policies friendly\n  Related: rhbz#2216256\n\n[1:3.0.7-23]\n- Add a workaround for lack of EMS in FIPS mode\n  Resolves: rhbz#2216256\n\n[1:3.0.7-22]\n- Remove unsupported curves from nist_curves.\n  Resolves: rhbz#2069336\n\n[1:3.0.7-21]\n- Remove the listing of brainpool curves in FIPS mode.\n  Related: rhbz#2188180\n\n[1:3.0.7-20]\n- Fix possible DoS translating ASN.1 object identifiers\n  Resolves: CVE-2023-2650\n- Release the DRBG in global default libctx early\n  Resolves: rhbz#2211340\n\n[1:3.0.7-19]\n- Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode\n  Resolves: rhbz#2169757\n\n[1:3.0.7-18]\n- Use OAEP padding and aes-128-cbc by default in cms command in FIPS mode\n  Resolves: rhbz#2160797\n\n[1:3.0.7-17]\n- Enforce using EMS in FIPS mode - better alerts\n  Related: rhbz#2157951\n\n[1:3.0.7-16]\n- Upload new upstream sources without manually hobbling them.\n- Remove the hobbling script as it is redundant. It is now allowed to ship\n  the sources of patented EC curves, however it is still made unavailable to use\n  by compiling with the 'no-ec2m' Configure option. The additional forbidden\n  curves such as P-160, P-192, wap-tls curves are manually removed by updating\n  0011-Remove-EC-curves.patch.\n- Enable Brainpool curves.\n- Apply the changes to ec_curve.c and  ectest.c as a new patch\n  0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.\n- Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.\n- Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.\n  Resolves: rhbz#2130618, rhbz#2188180\n\n[1:3.0.7-15]\n- Backport implicit rejection for RSA PKCS#1 v1.5 encryption\n  Resolves: rhbz#2153471\n\n[1:3.0.7-14]\n- Input buffer over-read in AES-XTS implementation on 64 bit ARM\n  Resolves: rhbz#2188554\n\n[1:3.0.7-13]\n- Enforce using EMS in FIPS mode\n  Resolves: rhbz#2157951\n- Fix excessive resource usage in verifying X509 policy constraints\n  Resolves: rhbz#2186661\n- Fix invalid certificate policies in leaf certificates check\n  Resolves: rhbz#2187429\n- Certificate policy check not enabled\n  Resolves: rhbz#2187431\n- OpenSSL rsa_verify_recover key length checks in FIPS mode\n  Resolves: rhbz#2186819\n\n[1:3.0.7-12]\n- Change explicit FIPS indicator for RSA decryption to unapproved\n  Resolves: rhbz#2179379\n\n[1:3.0.7-11]\n- Add missing reference to patchfile to add explicit FIPS indicator to RSA\n  encryption and RSASVE and fix the gettable parameter list for the RSA\n  asymmetric cipher implementation.\n  Resolves: rhbz#2179379\n\n[1:3.0.7-10]\n- Add explicit FIPS indicator to RSA encryption and RSASVE\n  Resolves: rhbz#2179379\n\n[1:3.0.7-9]\n- Fix explicit FIPS indicator for X9.42 KDF when used with output lengths  14 bytes\n  Resolves: rhbz#2175864\n\n[1:3.0.7-8]\n- Fix Wpointer-sign compiler warning\n  Resolves: rhbz#2178034\n\n[1:3.0.7-7]\n- Add explicit FIPS indicators to key derivation functions\n  Resolves: rhbz#2175860 rhbz#2175864\n- Zeroize FIPS module integrity check MAC after check\n  Resolves: rhbz#2175873\n- Add explicit FIPS indicator for IV generation in AES-GCM\n  Resolves: rhbz#2175868\n- Add explicit FIPS indicator for PBKDF2, use test vector with FIPS-compliant\n  salt in PBKDF2 FIPS self-test\n  Resolves: rhbz#2178137\n- Limit RSA_NO_PADDING for encryption and signature in FIPS mode\n  Resolves: rhbz#2178029\n- Pairwise consistency tests should use Digest+Sign/Verify\n  Resolves: rhbz#2178034\n- Forbid DHX keys import in FIPS mode\n  Resolves: rhbz#2178030\n- DH PCT should abort on failure\n  Resolves: rhbz#2178039\n- Increase RNG seeding buffer size to 32\n  Related: rhbz#2168224\n\n[1:3.0.7-6]\n- Fixes RNG slowdown in FIPS mode\n  Resolves: rhbz#2168224\n\n[1:3.0.7-5]\n- Fixed X.509 Name Constraints Read Buffer Overflow\n  Resolves: CVE-2022-4203\n- Fixed Timing Oracle in RSA Decryption\n  Resolves: CVE-2022-4304\n- Fixed Double free after calling PEM_read_bio_ex\n  Resolves: CVE-2022-4450\n- Fixed Use-after-free following BIO_new_NDEF\n  Resolves: CVE-2023-0215\n- Fixed Invalid pointer dereference in d2i_PKCS7 functions\n  Resolves: CVE-2023-0216\n- Fixed NULL dereference validating DSA public key\n  Resolves: CVE-2023-0217\n- Fixed X.400 address type confusion in X.509 GeneralName\n  Resolves: CVE-2023-0286\n- Fixed NULL dereference during PKCS7 data verification\n  Resolves: CVE-2023-0401\n\n[1:3.0.7-4]\n- Disallow SHAKE in RSA-OAEP decryption in FIPS mode\n  Resolves: rhbz#2142121\n\n[1:3.0.7-3]\n- Refactor OpenSSL fips module MAC verification\n  Resolves: rhbz#2157965\n\n[1:3.0.7-2]\n- Various provider-related imrovements necessary for PKCS#11 provider correct operations\n  Resolves: rhbz#2142517\n- We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream\n  Resolves: rhbz#2133809\n- Removed recommended package for openssl-libs\n  Resolves: rhbz#2093804\n- Adjusting include for the FIPS_mode macro\n  Resolves: rhbz#2083879\n- Backport of ppc64le Montgomery multiply enhancement\n  Resolves: rhbz#2130708\n- Fix explicit indicator for PSS salt length in FIPS mode when used with\n  negative magic values\n  Resolves: rhbz#2142087\n- Update change to default PSS salt length with patch state from upstream\n  Related: rhbz#2142087\n\n[1:3.0.7-1]\n- Rebasing to OpenSSL 3.0.7\n  Resolves: rhbz#2129063\n\n[1:3.0.1-44]\n- SHAKE-128/256 are not allowed with RSA in FIPS mode\n  Resolves: rhbz#2144010\n- Avoid memory leaks in TLS\n  Resolves: rhbz#2144008\n- FIPS RSA CRT tests must use correct parameters\n  Resolves: rhbz#2144006\n- FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC\n  Resolves: rhbz#2144017\n- Remove support for X9.31 signature padding in FIPS mode\n  Resolves: rhbz#2144015\n- Add explicit indicator for SP 800-108 KDFs with short key lengths\n  Resolves: rhbz#2144019\n- Add explicit indicator for HMAC with short key lengths\n  Resolves: rhbz#2144000\n- Set minimum password length for PBKDF2 in FIPS mode\n  Resolves: rhbz#2144003\n- Add explicit indicator for PSS salt length in FIPS mode\n  Resolves: rhbz#2144012\n- Clamp default PSS salt length to digest size for FIPS 186-4 compliance\n  Related: rhbz#2144012\n- Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode\n  Resolves: rhbz#2145170\n\n[1:3.0.1-43]\n- CVE-2022-3602: X.509 Email Address Buffer Overflow\n- CVE-2022-3786: X.509 Email Address Buffer Overflow\n  Resolves: CVE-2022-3602\n\nopenssl-fips-provider\n[3.0.7-6.0.1]\n- Drop OpenELA branding [Orabug: 37274593]\n- Add bundle with Oracle Linux 9 OpenSSL FIPS Provider module files [Orabug: 37274593]\n- Update extract-src.sh script to support non-hobbled openssl tarball [Orabug: 37274593]\n\n[3.0.7.openela.0.1]\n- Add OpenELA specific changes\n\n[3.0.7-6]\n- Try to fix an upgrade issue with pkg version numbers\n  Resolves: RHEL-58662\n\n[3.0.7-5]\n- Add an empty metapackage and proper requires to correctly\n  handle upgrades.\n  Related: RHEL-32123\n\n[3.0.7-4]\n- Change subpackage names to avoid build gating issues\n  Related: RHEL-32123\n\n[3.0.7-3]\n- Change tarball source contents\n- Rework file extraction process\n- Fixes debug packages\n  Resolves: RHEL-32123",
  "id": "ELSA-2024-9333",
  "ovalId": "oval:com.oracle.elsa:def:20249333",
  "source": "oracle_linux",
  "title": "ELSA-2024-9333:  openssl and openssl-fips-provider security update (LOW)",
  "url": "https://linux.oracle.com/errata/ELSA-2024-9333.html"
}