RLSA-2021:1024

Dashboard / Vulnerabilities / RLSA-2021:1024

RLSA-2021:1024

Summary: Important: openssl security update

Details: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: NULL pointer dereference in signature_algorithms processing (CVE-2021-3449) * openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT (CVE-2021-3450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://errata.rockylinux.org/RLSA-2021:1024, https://bugzilla.redhat.com/show_bug.cgi?id=1941547, https://bugzilla.redhat.com/show_bug.cgi?id=1941554