RHSA-2018:0998: Moderate: openssl security and bug fix update
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.<br>Security Fix(es):<br><li> openssl: bnsqrx8xinternal carry bug on x8664 (CVE-2017-3736)</li> <li> openssl: Read/write after SSL object in error state (CVE-2017-3737)</li> <li> openssl: rsaz1024mulavx2 overflow bug on x8664 (CVE-2017-3738)</li> For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2018:0998?
The severity of RHSA-2018:0998 is considered important.
How do I fix RHSA-2018:0998?
To fix RHSA-2018:0998, update the OpenSSL packages to version 1.0.2k-12.el7 or later.
What vulnerabilities are addressed in RHSA-2018:0998?
RHSA-2018:0998 addresses a carry bug on x86_64 in OpenSSL (CVE-2017-3736).
Which systems are affected by RHSA-2018:0998?
RHSA-2018:0998 affects x86_64, ppc64le, and other systems running specific versions of OpenSSL packages.
Is the OpenSSL library critical to my server's security as per RHSA-2018:0998?
Yes, the OpenSSL library is critical for enabling secure communications, and vulnerabilities should be addressed promptly.