RHSA-2021:5226: Moderate: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.Security Fix(es): openssl: Read buffer overruns processing ASN.1 strings (CVE-2021-3712) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:5226?
RHSA-2021:5226 is classified as a critical security vulnerability due to buffer overrun issues in OpenSSL.
How do I fix RHSA-2021:5226?
To remediate RHSA-2021:5226, update OpenSSL to version 1.1.1k-5.el8_5 or later.
Which OpenSSL versions are affected by RHSA-2021:5226?
RHSA-2021:5226 affects OpenSSL versions prior to 1.1.1k-5.el8_5.
What is CVE-2021-3712 related to RHSA-2021:5226?
CVE-2021-3712 is a specific vulnerability that involves read buffer overruns when processing ASN.1 strings in OpenSSL.
Is it safe to use OpenSSL after applying the patch for RHSA-2021:5226?
Yes, after applying the patch for RHSA-2021:5226, OpenSSL is considered safe if no further vulnerabilities are present.