RHSA-2024:7848: Low: openssl security update
Low: openssl security update
Other sources
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.Security Fix(es): openssl: SSLselectnextproto buffer overread (CVE-2024-5535) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:7848?
The severity of RHSA-2024:7848 is classified as low.
How do I fix RHSA-2024:7848?
You can fix RHSA-2024:7848 by updating the OpenSSL package to version 1.1.1k-14.el8_6.
Which systems are affected by RHSA-2024:7848?
RHSA-2024:7848 affects Red Hat Enterprise Linux variants, including x86_64, ARM 64, Power, and IBM z Systems.
What does the vulnerability in RHSA-2024:7848 relate to?
The vulnerability in RHSA-2024:7848 is related to a buffer overread issue in the SSL_select_next_proto function of OpenSSL.
Is there a new version released for OpenSSL in RHSA-2024:7848?
Yes, a new version 1.1.1k-14.el8_6 has been released to address the vulnerability in RHSA-2024:7848.